KLEZ variants often forge reply addresses... That could be the issue. Have you looked at the sending IP in the message headers?
-----Original Message----- From: W2K Discussions [mailto:[EMAIL PROTECTED]] Posted At: Tuesday, July 16, 2002 12:17 PM Posted To: Windows 2000 List Conversation: Klez Subject: Klez Hi there... I had a user infected with the KLEZ worm.... And I have since rebuilt his machine.... (format, and reload), yet scan mail has picked up an instance of his machine apparently sending an email with this.... Is there something else I should have done to repair the machine? It is running AV with all the latest patches.... Ideas? Dustin ------ You are subscribed as [EMAIL PROTECTED] Archives: http://www.swynk.com/sitesearch/search.asp To unsubscribe send a blank email to %%email.unsub%% ------ You are subscribed as [email protected] Archives: http://www.swynk.com/sitesearch/search.asp To unsubscribe send a blank email to [EMAIL PROTECTED]
