Date: Thu, 25 Jul 2002 01:14:54 +0000
From: "Matthew Hanson" <[EMAIL PROTECTED]>
Subject: Re: [LIB] Worm Klez.E immunity

>From: "Pres Waterman" <[EMAIL PROTECTED]>
>
>[EMAIL PROTECTED] is an abandoned account.
>
>The "mailbox full" is indicative of the trash box I send every mail
>addressed to [EMAIL PROTECTED] to, is full itself.

Hmmm.... So the [EMAIL PROTECTED] account is still active, but you're not 
using it any more?

>Furthermore, the way klez works
>is it takes someone's address book and spoofs addresses found withIN it as 
>the "from" address. So it looks loke someone had my old address ( all it 
>takes is the default "put people I reply to in my address book" setting to 
>do that, and then they inadvertently passed on the klez.

I see where the .il domain is Isreal.  Think someone there, maybe from the 
list, had your email address and got hit with Klez?  It was just a bit 
'funny' that that's quite a hotspot these days where something like this 
might be more than an inadvertent passing along of Klez.

I've been having problems on my L70 that I'm not absolutely certain  isn't a 
new trojan of some kind.  Though I'm pretty sure it was the new RealAudio 
player I just upgraded to.  With nothing running at boot, no screensaver or 
virus software running, scandisk run in Windows was going through failure 
loops complaining that some software was running that made it impossible to 
scan the system... and then prompting me to close all running apps.

Just a couple of weeks back I had to clean Klez off a friend's system that 
had the exact same symptom (plus a few).  But neither a McAfee scan, or an 
online scan at the www.antivirus.com site for Trend came up with any virus 
on my system.

I guess what made me nervous was that I had just visited the 'Cult of the 
Dead Cow' website after Leo Laporte on TechTV had been talking about.  Seems 
they are developing software to help prevent potential Interent problems.  
And though I trust the group and am pretty certain they wouldn't attack 
people visitiung their site, as it seems they've always been involved in 
warning the public about potential security problems, it was a bit creepy 
having system problems soon after browsing their website.

But so I uninstalled the RealOne RealAudio software, and the scandisk 
problem disappeared, though I was still experiencing a number of odd system 
behaviours.  I think maybe the old Real G2 player I installed after RealOne 
was having problems playing some .ra files.  I uninstalled that, and 
installed a newer old version 7.0 of RealPlayer, and so far things seem to 
be working without problems.

This has been the most problem I've had with Windows, ad windows software in 
quite a while, if in fact that was the problem.  Maybe it's Karma from 
suggesting that I'd tamed the 'lion'. :-0

Matt



_________________________________________________________________
Send and receive Hotmail on your mobile device: http://mobile.msn.com




**************************************************************
http://libretto.basiclink.com - Libretto mailing list
http://www.silverace.com/libretto/ - Archives

                 -------TO UNSUBSCRIBE-------
Reply to any of the list messages. The reply mail should be
addressed to: [EMAIL PROTECTED] - Then replace any text
on the message's subject line: cmd:unsubscribe
              --------TO UNSUBSCRIBE DIGEST------
Do above but with this on subject line: cmd:unsubscribe digest
**************************************************************


Reply via email to