On Tue, 23 Apr 2002 09:22:25 -0500
begin Bill Day <[EMAIL PROTECTED]> spewed forth:
This is the klez virus. It's a bad one (for those unfortunates who are
running Windoze). I've received maybe 50 or so such e-mails. They always
have an executable (but the name is always different, like rock.exe,
width.exe, etc.
This one is a bitch to clean, too. Suggestion: reformat and install Linux
and be done with crap like this.
> Somone on the list with their WinClient is currently infected with a
> email worm virus.
>
> Currently little info is known about the worm. Doug has determined that
> it may contain its own SMTP code and it picking addreses at random.
>
> Currently I have recieved 3 different subjects all fromt he same system:
> Received: from imsp074.netvigator.com (imsp074.netvigator.com
> [218.102.23.129])
>
> Subjects so far:
> Subject: Is a registered trademark of Linus Torvalds
> Subject: Congratulations
> Subject: Re:bill,let's be friends #the name will change as it is using
> the address book of whoever is infected.
>
> So far the spoofed addresses I have recieved are as follows:
> From: xcyber <[EMAIL PROTECTED]>
> From: submissions <[EMAIL PROTECTED]>
> From: burns <[EMAIL PROTECTED]>
> From: langson <[EMAIL PROTECTED]>
> From: doug <[EMAIL PROTECTED]>
>
> Thos of you using Lookout/Express check your sent folder and update your
> virsu scanners for the windoze boxen. Not sure what all it does at this
> point as I havent had time to dig into it. Doug may be looking more
> into at this point.
>
Ciao,
David A. Bandel
--
Focus on the dream, not the competition.
-- Nemesis Racing Team motto
_______________________________________________
Linux-users mailing list - http://linux-sxs.org/mailman/listinfo/linux-users
Subscribe/Unsubscribe info, Archives,and Digests are located at the above URL.
