Mark H. Bahr
koine at ev1.net
Tue Oct 8 09:14:44 EDT 2002
Klez is a virus that sends itself to all the addresses in the infected
computer's list with an address from that address book in the from line, it
has it's own SMTP engine. It's a nasty little bugger. Following is a link
to Norton's information on it as well as a cure. I haven't received it
because Norton as well as my provider stop it before it gets to me.
> At 04:18 PM 10/6/2002 -0400, Philip E. Cleary wrote:
> >I just received a message addressed to the list with the subject
> >yours." It was purportedly sent from jwrobie at mindspring.com. It is
> >with the W32.Klez.H at mm virus.
> I went in to the administrator's menu to put myself on permanent
> moderation, but it looks like Carl beat me to it. I think that will
> any further virus-laden messages from my address.
> These emails were not sent from my computer, but from someone who spoofed
> my address. There are several reasons I'm fairly sure this didn't
> with my computer: (1) on Thursday, I was working at Almaden Research
> Center, which has security measure that prevented me from sending any mail
> at all, and some of these mails were sent at times I was simply not
> connected to the Internet; (2) Norton AntiVirus Corporate Edition, which
> running on my computer, detects the virus in the incoming mails and
> them without letting me read them, so I seem to be protected against this
> one; (4) I use Eudora, and Klez usually targets Outlook; (4) Norton also
> fails to find any viruses on my computer.
> The email headers for most of the mails seem indicate that they were sent
> by someone else:
> >Received: from Ubouymdex ([184.108.40.206]) by out016.verizon.net
> > (InterMail vM.5.01.05.09 201-253-122-126-109-20020611) with
> > id <20021003173108.BUQK9318.out016.verizon.net at Ubouymdex>
> > for <b-greek at franklin.oit.unc.edu>;
> Some of the email headers are less clear.
> I'm not an expert on viruses, but I don't think this is coming from my
> computer. Regardless, Carl and I have put me on moderation so no new
> viruses slip out to the list, and I got the latest updates from Norton.
> B-Greek home page: http://metalab.unc.edu/bgreek
> You are currently subscribed to b-greek as: [koine at ev1.net]
> To unsubscribe, forward this message to
> To subscribe, send a message to subscribe-b-greek at franklin.oit.unc.edu
More information about the B-Greek