Thanks. Sunday, February 9, 20038:05 PMBryan Forrestbcforrest at cox.net
>On Sunday, February 9, 2003, at 07:46 PM, Harry Jacobson-Beyer wrote: > >> I've been getting strange messages which I assume are spam or something >> coming from someone's infected computer. >> >> the most recent message came from: gwishw <gwishw at hotmail.com> >> >> >> The messages have two attachments one of which is readme.1.txt and the >> other is readme.bat. >> >> The readme.1.txt starts out like this: >> >> >> >> Microsoft Windows Millennium Edition >> >> Help for Emergency Startup Disk >> ----------------------------------------- >> >> (c) Copyright Microsoft Corporation, 2000 >> >> This document provides complementary or late-breaking >> >> information to supplement the Windows Millennium Edition >> >> (Windows ME) documentation. >> >> To close this Help file, press ALT-F-X. >> >> >> I deleted most of the file. Oh and there was a message in the body of >> the >> email. However the message doesn't forward nor can I cut and paste it. >> Here it is: >> >> This is a WinXP patch >> I wish you would enjoy it. >> >> Anyone know what's going on? >> >> Harry >> >> >> >> | The next meeting of the Louisville Computer Society will >> | be February 25. The LCS Web page is <http://www.kymac.org>. >> > >Someone on a windows box somewhere is infected with the Klez virus. It >is a fairly dangerous virus and one of the most widely spread in the >past few years. It will pick a file from a user's hard drive at random, >attach it to an email, and choose two random names from the user's >address book, selecting one as the sender, the other as the recipient. >So, most likely, the person whose name appears at the top of your email >was not the sender, but someone who knows you and the "sender." > >Bryan C. Forrest >Macintosh Specialist >LifeNet >http://www.lifenet.org > > > >| The next meeting of the Louisville Computer Society will >| be February 25. The LCS Web page is <http://www.kymac.org>. | The next meeting of the Louisville Computer Society will | be February 25. The LCS Web page is <http://www.kymac.org>.
