For Fred & the group, Klez uses "spoofing" to disguise the source. Spoofing is stealing valid email addresses and sending infected files from the stolen address. This does not in any way mean that someone in this group is definitely infected. I will describe a scenario or two that happened to me concerning Klez. 1) On Saturday a few weeks ago at 6pm I got an infected Klez attachment from a very good friend of mine from his work computer with a 5pm time stamp on it. Upon Norton detecting the virus, I phoned my fried at home and told him what happened, his reply was that that computer was switched off on Friday and had been down all weekend. This established the "spoofing" since that computer was not turned on, and on the Thursday of that week I was at his office and installed Norton anti virus with all updates, did a complete scan and left auto detect turned on. It did not come from his machine although the sender was listed as being him.
2) I got two emails from two different people at Fadal.com, both said that I had sent them Klez and asked me to check my machine. I use McAfee Spamkiller and view and delete any unknown attachments before I download them, I have Norton with all updates on my machines. No virus here, so I wrote these two people and told them that they had been "spoofed" and Klez came from elsewhere. Now get this, BOTH people wrote me back and said that they had never sent me any such email.... Klez may exist on a server and not on any machines unless you execute the Klez infected file. Klez, or the source of Klez, gleans email addresses and sends the infected files out from valid addresses. Also, Klez evidently carries on different levels of complaints etc as well. go figure... Michael [EMAIL PROTECTED] wrote: > > There has been an increase in the number of infected files attempting to > pass through our AntiVirus scanners. Judging by the names appearing in the > headers, I believe one or more people in the SmartCAM list server may be > infected with the Klez worm. > > Here's A good explanation from Ziff Davis publishing > > http://zdnet.com.com/2100-1105-916995.html > > And all the technical stuff from Norton > > http:[EMAIL PROTECTED] > > If you haven't already done so, please check your system for infection. > > Thanks. > > ============================================= > Fred Lauzus, CAM Programming Coordinator > High Steel Structures, Incorporated > mailto:[EMAIL PROTECTED] http://www.highsteel.com > ============================================= > > > ====================================================================== > To find out more about this mailing list including how to unsubscribe, > send the message "info mfg-smartcam" to [EMAIL PROTECTED] > ====================================================================== -- Michael Gailey Artistic CNC Mill, Router and Engraver Programming 3D modeling for Product Design and Development http://www.microsystemsgeorgia.com/toc.htm ====================================================================== To find out more about this mailing list including how to unsubscribe, send the message "info mfg-smartcam" to [EMAIL PROTECTED] ======================================================================
