Hello Peter,
Thanks very much for your reply.
> First: if TB! would have sent this message it will resist in your
> 'Sent' folder. Have a look there ... (Albeit I can't believe TB! has
> been sent it, have a look to be sure).
I believe you are correct.. it was not in my sent folder. I have been
looking for more information on this worm and I read on alt.comp.virus
that it forges the "From" header, making it look as though it came
from an individual.
> Second: You write you're not _using_ Outlook. Do you have it
> installed anyway and maybe some aeons ago configured to work
> properly? Does Outlook (if installed) or Outlook Express have
> knowledge about your account data (name, e-mail-address,
> SMTP-server)?
Outlook had been installed when my laptop was initially configured by
the computer folks at work. I've never actually started it up or
configured it; I've used TB! for a few years.
> You have written 'There was no attachment from me.' ... does that mean
> the recipient had no attachment in the mail? If so there's no 'Klez'
> issue we could talk about, as 'Klez' is spreading itself and not
> sending empty messages :-)
She originally indicated that there was no attachment, and upon
reexamining it in her trash folder (of her Outlook program), said
there was one. She deleted it without taking note of its name or
extension.
> To come to an end: I'd suggest updating the signature file and re-scan
> your whole system again. Installing a second AV-software would be also
> a good idea, in case there's a new variant of Klez around NAV has not
> yet in the signature file.
Thanks. I registered KAV (because of its integration with TB!), and
scanned my system. It identified Exploit.IFrame.FileDownload in the
trash folder of TB! (I had deleted the message that she had sent me,
which had a copy of the original message that I was alleged to have
sent her). Interestingly, I had set KAV to delete infected files, and
it deleted all the messages in the trash (not a huge problem
obviously, but I usually keep 5000 messages there).
--
Regards,
Mike
Using The Bat! 1.60d
under Windows 98 4.10 Build 2222 A
= = = = = = = = = = = = = = = = = = = = = = = = = = = = =
Mike Harlos Winnipeg, Manitoba, Canada
PGP Keys: DH/DSS- 0x8CD85BCE RSA- 0xBBDB40B1
= = = = = = = = = = = = = = = = = = = = = = = = = = = = =
________________________________________________________
Current Ver: 1.60c
FAQ : http://faq.thebat.dutaint.com
Unsubscribe: mailto:[EMAIL PROTECTED]
Archives : http://tbudl.thebat.dutaint.com
Moderators : mailto:[EMAIL PROTECTED]
TBTech List: mailto:[EMAIL PROTECTED]
