> From: Julia Thompson <[EMAIL PROTECTED]> > Robert Seeberger wrote: > > > > Its not from Ritu Ko is it? > > ----- Original Message ----- > > From: "Julia Thompson" <[EMAIL PROTECTED]> > > To: "Brin-L" <[EMAIL PROTECTED]> > > Sent: Monday, June 10, 2002 10:41 AM > > Subject: Watch out for e-mail attachments from this address > > > > > I got a message bounce with a virus attached. Apparently some system is > > > mailing out a virus making it look as if it's from ME, and one of them > > > bounced. > > > > > > So I'd recommend that if you get any off-list mail from me, you delete > > > any with attachments unless you've been specifically told by me in an > > > earlier e-mail that I'm sending you an attachment, and that the name > > > matches the name I gave you. > > > > > > Julia > > I couldn't tell who it was from. The bounce I got just said > > The following mail can't be sent to XXXxxxxx@Xxxxxxxx: > > From: [EMAIL PROTECTED] > To: [EMAIL PROTECTED] > Subject: roar. The crowd loved it. The party outside his > The file is the original mail > > and there was the virus as attachment. > > (I x'ed out the address it was being sent to. Anyone who suspects > they're infected who wants to know what the address was can have it > off-list upon request.) > > If the bounce had had full headers from the original message, I'd be > able to track it down more easily, but of course it didn't. :(
Klez is a mass-mailing worm which searches the Windows address book for email addresses and sends messages to all recipients that it finds. The worm uses its own SMTP engine to send the messages. ____It can also spoof the 'From' in messages, a factor which has resulted in widespread confusion about the bug____. The subject and attachment name of incoming emails is randomly chosen, making it harder for users to spot. The attachment will have one of the following extensions: .bat, .exe, .pif or .scr. Klez is capable of infecting files. The worm exploits a vulnerability in Microsoft Outlook and Outlook Express in an attempt to execute itself when you open or even preview the message.
