🚀 go-pugleaf

RetroBBS NetNews Server

Inspired by RockSolid Light RIP Retro Guy

Article View: sci.electronics.repair
Article #1050

Re: REAL VIRUS ALERT to all frequent users of sci.electronics.repair

#1050
From: Bob Parker
Date: Wed, 24 Apr 2002 16:38
47 lines
2739 bytes
Hi,
   I case it's not clear to everyone, this "Klez" worm covers its
tracks by taking a random e-mail address from the address book in the
machine it's infected, and putting that random address into the "From"
line of the infected e-mails it sends out to others in the same
address book.
   This means that when you receive it, it did *not* come from the
computer shown in the "From" line. So don't contact that person and
abuse them. :-) 
   If that doesn't make sense it's because I'm half asleep. Don
McKenzie has written a much clearer explanation and put it on his
website. See http://www.dontronics.com/virus.html

Cheers,
Bob


"David" <dkuhajda@locl.net.REMOVE> wrote:

>Both myself and others have received this virus in attachments with e-mail
>addresses from people who we normally see on this newgroup.
>
>The virus as identified by Norton's is Winkzd.exe (general), and
>W32klez.gen@mm (from virus info).
>
>It is very probable that someone has this virus and needs to have thier
>computer rescanned and checked.
>The other possibility is someone is deliberately trying to infect a bunch of
>machines with the virus.
>
>Since I have full protection of Norton AV and others active all the time,
>all the virus programs have been caught so far before being saved in any
>form on my machine.
>
>Lets simply do a check of all our machines to make sure we can stop this
>virus before it gets out of hand.
>
>David
>
>
>
>
>


 Bob Parker- electronics technician, Sydney Australia
 home page:  http://members.ozemail.com.au/~bobpar
Technical Details
Message-ID: <3cc6dd52.5210429@news.zipworld.com.au>
Path: arc1-ca.pugleaf.net!archiver1.google.com!news1.google.com!newsfeed.stanford.edu!cyclone.bc.net!news-hog.berkeley.edu!ucberkeley!nntp-relay.ihug.net!ihug.co.nz!out.nntp.be!propagator-SanJose!in.nntp.be!newsfeed.zip.com.au!nasal.pacific.net.au!not-for-mail
References: <3cc6d3a6_1@news.greennet.net>

Show Full Headers
Complete Article Headers
X-Google-Language: ENGLISH,ASCII-7-bit
X-Google-Thread: 103407,f5b7f625e2259098,start
X-Google-Attributes: gid103407,public
X-Google-Thread: 1131b0,f9a038d13c891748
X-Google-Attributes: gid1131b0,public
X-Google-ArrivalTime: 2002-04-24 09:42:26 PST
Path: arc1-ca.pugleaf.net!archiver1.google.com!news1.google.com!newsfeed.stanford.edu!cyclone.bc.net!news-hog.berkeley.edu!ucberkeley!nntp-relay.ihug.net!ihug.co.nz!out.nntp.be!propagator-SanJose!in.nntp.be!newsfeed.zip.com.au!nasal.pacific.net.au!not-for-mail
From: esxb-7ybt@dea.spamcon.org (Bob Parker)
Newsgroups: sci.electronics.repair,aus.electronics
Subject: Re: REAL VIRUS ALERT to all frequent users of sci.electronics.repair
Organization: Electronics Technician
Reply-To: esxb-7ybt@dea.spamcon.org
Message-ID: <3cc6dd52.5210429@news.zipworld.com.au>
References: <3cc6d3a6_1@news.greennet.net>
X-Newsreader: Forte Free Agent 1.21/32.243
Lines: 47
Date: Wed, 24 Apr 2002 16:38:56 GMT
NNTP-Posting-Host: 210.23.146.131
X-Complaints-To: news@pacific.net.au
X-Trace: nasal.pacific.net.au 1019666195 210.23.146.131 (Thu, 25 Apr 2002 02:36:35 EST)
NNTP-Posting-Date: Thu, 25 Apr 2002 02:36:35 EST