> -----Original Message----- > From: Niki Blowfield [mailto:[EMAIL PROTECTED]] > Sent: 21 May 2002 09:35 > To: Exchange Discussions > Subject: Klez in attached html > > > I appreciate this is probably down to my misunderstanding of > this virus, but we have one user who is being sent an html file > > As soon as the email is clicked on, the attachment is > attempted to be opened by Outlook. Then Officescan flags up > that there is a file in the users temp internet folder with > Klez, and it is the same filename as the html attachment, but > the html has changed to exe > > For instance, today he has an email with revisions1.html > attached. When he selects the email, it attempts to open the > attachment, and Officescan quarantines the file > revisions1.exe from the temp internet folder. > > I thought that Klez attachments had double extensions, like > revisions1.html.exe > > Why wouldn't scanmail be stopping this file? I havent in the > past considered that we should be blocking htm and html, but > should we? > > I've checked this PC with Officescan and Symantecs tool, and > it shows no traces of Klez
http://www.fsecure.com/v-descs/klez.shtml - I'd say you need to do some patching on the system in question and others like it. -- Robert Moir, MSMVP Senior IT Systems Engineer, Luton Sixth Form College "Dogs have owners, Cats have staff" -- This e-mail is intended for the addressee shown. It contains information that is confidential and protected from disclosure. Any review, dissemination or use of this transmission or its contents by persons or unauthorized employees of the intended organisations is strictly prohibited. The contents of this email do not necessarily represent the views or policies of Luton Sixth Form College, its employees or students. _________________________________________________________________ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Archives: http://www.swynk.com/sitesearch/search.asp To unsubscribe: mailto:[EMAIL PROTECTED] Exchange List admin: [EMAIL PROTECTED]
