Article View: sci.electronics.repair
Article #1050Re: REAL VIRUS ALERT to all frequent users of sci.electronics.repair
From: Bob Parker
Date: Wed, 24 Apr 2002 16:38
Date: Wed, 24 Apr 2002 16:38
47 lines
2739 bytes
2739 bytes
Hi, I case it's not clear to everyone, this "Klez" worm covers its tracks by taking a random e-mail address from the address book in the machine it's infected, and putting that random address into the "From" line of the infected e-mails it sends out to others in the same address book. This means that when you receive it, it did *not* come from the computer shown in the "From" line. So don't contact that person and abuse them. :-) If that doesn't make sense it's because I'm half asleep. Don McKenzie has written a much clearer explanation and put it on his website. See http://www.dontronics.com/virus.html Cheers, Bob "David" <dkuhajda@locl.net.REMOVE> wrote: >Both myself and others have received this virus in attachments with e-mail >addresses from people who we normally see on this newgroup. > >The virus as identified by Norton's is Winkzd.exe (general), and >W32klez.gen@mm (from virus info). > >It is very probable that someone has this virus and needs to have thier >computer rescanned and checked. >The other possibility is someone is deliberately trying to infect a bunch of >machines with the virus. > >Since I have full protection of Norton AV and others active all the time, >all the virus programs have been caught so far before being saved in any >form on my machine. > >Lets simply do a check of all our machines to make sure we can stop this >virus before it gets out of hand. > >David > > > > > Bob Parker- electronics technician, Sydney Australia home page: http://members.ozemail.com.au/~bobpar
Technical Details
Message-ID:
<3cc6dd52.5210429@news.zipworld.com.au>Path:
arc1-ca.pugleaf.net!archiver1.google.com!news1.google.com!newsfeed.stanford.edu!cyclone.bc.net!news-hog.berkeley.edu!ucberkeley!nntp-relay.ihug.net!ihug.co.nz!out.nntp.be!propagator-SanJose!in.nntp.be!newsfeed.zip.com.au!nasal.pacific.net.au!not-for-mailReferences:
<3cc6d3a6_1@news.greennet.net>Show Full Headers
Complete Article Headers
X-Google-Language: ENGLISH,ASCII-7-bit X-Google-Thread: 103407,f5b7f625e2259098,start X-Google-Attributes: gid103407,public X-Google-Thread: 1131b0,f9a038d13c891748 X-Google-Attributes: gid1131b0,public X-Google-ArrivalTime: 2002-04-24 09:42:26 PST Path: arc1-ca.pugleaf.net!archiver1.google.com!news1.google.com!newsfeed.stanford.edu!cyclone.bc.net!news-hog.berkeley.edu!ucberkeley!nntp-relay.ihug.net!ihug.co.nz!out.nntp.be!propagator-SanJose!in.nntp.be!newsfeed.zip.com.au!nasal.pacific.net.au!not-for-mail From: esxb-7ybt@dea.spamcon.org (Bob Parker) Newsgroups: sci.electronics.repair,aus.electronics Subject: Re: REAL VIRUS ALERT to all frequent users of sci.electronics.repair Organization: Electronics Technician Reply-To: esxb-7ybt@dea.spamcon.org Message-ID: <3cc6dd52.5210429@news.zipworld.com.au> References: <3cc6d3a6_1@news.greennet.net> X-Newsreader: Forte Free Agent 1.21/32.243 Lines: 47 Date: Wed, 24 Apr 2002 16:38:56 GMT NNTP-Posting-Host: 210.23.146.131 X-Complaints-To: news@pacific.net.au X-Trace: nasal.pacific.net.au 1019666195 210.23.146.131 (Thu, 25 Apr 2002 02:36:35 EST) NNTP-Posting-Date: Thu, 25 Apr 2002 02:36:35 EST