Date: Tue, 30 Jul 2002 20:12:26 +0000 From: "Matthew Hanson" <[EMAIL PROTECTED]> Subject: Yet more Klez
It seems at least one or two other listers received one or more of the same infected emails that I got from the NetVision server spoofing some of our list member's addresses. I've been getting these just about daily now. Today's installment purports to be from Ex Israeli Prime Minister Ehud Barak! Does this header look familiar to anyone: Date: Tue, 30 Jul 2002 13:26:23 +0300 (IDT) From: Barak <[EMAIL PROTECTED]> Subject: A new website To: [EMAIL PROTECTED] My address on the same computer as one with Barak�s address? I suppose it�s certainly possible. But if Neil�s theory about these coming from a computer belonging to a list member is a possibility, who has my address and Barak�s address on their system? Has anyone else received this one? It seems like Klez is also smart enough to dig through non-email related files on a host system for information. It certainly finds small text and graphic files to attach as a second file. I wonder if any virus research groups have really established what all the Klez and Ninda viruses are capable of. What are the odds that it would pick Barak's address out of the many email addresses on a system? In more than 10 years of using computers on networks I�ve never seen the same virus come in infected email to my mailbox from the same server on a daily basis. The few I�ve received over the years have come in one email once. I�ve never gotten them daily like these recent posts. Strange� Matt(S) _________________________________________________________________ Send and receive Hotmail on your mobile device: http://mobile.msn.com ************************************************************** http://libretto.basiclink.com - Libretto mailing list http://www.silverace.com/libretto/ - Archives -------TO UNSUBSCRIBE------- Reply to any of the list messages. The reply mail should be addressed to: [EMAIL PROTECTED] - Then replace any text on the message's subject line: cmd:unsubscribe --------TO UNSUBSCRIBE DIGEST------ Do above but with this on subject line: cmd:unsubscribe digest **************************************************************
