Oboy, is it getting tricky. I just got another copy labeled "W32-Klex E
removal tools"
----------
>From: "Lon J. Rombough" <lonrom@hevanet.com>
>To: NAFEX <nafex@lists.ibiblio.org>, Agrisynergy
<Agrisynergy@maelstrom.stjohns.edu>
>Subject: [NAFEX] Virus variant
>Date: Sun, May 12, 2002, 8:17 PM
>
>The W32/Klez virus seems to be producing a new version of itself. I've
>gotten two letters tonight that were supposedly mail returned as
>undeliverable. The first tipoff they weren't that was the size - no
>returned letter is as much as 130 to 240 kb in size. The second tipoff is
>that the attachment contains several files, not just one.
> I used to be able to view one of these at the source and find the
>address where it originated, but now the virus puts in Mailer-Daemon as the
>source.
>-Lon Rombough