Jim, I also get this virus emailed to me several times a week, although it is slowing down lately. You are correct that it changes the "reply to" address (usually to someone else in the infected senders address book), but if you are using Outlook (not express), you can right click on the email and choose "options". This will allow you to examine the complete path of travel the email took, including the true email address of the infected sender. In OE express I think you can do the same thing, but it is labeled properties instead of options. Play around with it and you'll discover the source. In my case there were several, all friends and relatives that were fairly new to computers and the internet. I was listed as the "reply to" on several infected emails that went to others, leading to accusations from other friends and relatives that I was the sender. Happy hunting. Todd Muncy http://MuncyFamily.com <http://muncyfamily.com/> -----Original Message----- From: jimgerren [mailto:jimgerren@...] Sent: Saturday, September 21, 2002 12:26 AM To: disklavier@yahoogroups.com Subject: [disklavier] W32.Klez.H@mm Virus (Worm) Dear Friends, For the past three weeks I have been bombarded by receiving mail containing the W32.Klez.H@mm worm. Fortunately, Norton Anti-virus catches and quarantines the email before it has a chance to do any harm to my PC. Unfortunately, this worm is very illusive. You can never find out the origin (who is sending the email) because the worm is intelligent enough to change the "FROM" identification. Additionally, it can choose from numerous subject lines, and is almost never the same subject twice. This worm can be extremely harmful, and sends out emails to people you have stored in your address book without you ever knowing. On the positive side, SYMANTEC (Norton) has developed a tool which can be downloaded to check and rid your PC of the virus should it be hiding on your PC. The file is quite small so the download time is fast. The following link describes how destructive this worm is, how it works, and has the tool for downloading and eliminating the worm should it reside on your PC. Although I have not been harmed by this worm/virus, I'm sure others who don't have the latest virus software have. And every time Norton catches an infected email (once or twice daily) I get a very uncomfortable feeling. I would appreciate it if you would all make the effort and take the time to check your PC. It doesn't take all that long. http://securityresponse.symantec.com/avcenter/venc/data/w32.klez.remov al.tool.html Thanks, Jim Gerren Yahoo! Groups Sponsor ADVERTISEMENT <http://rd.yahoo.com/M=233214.2377745.3805144.1261774/D=egroupweb/S=1705 032012:HM/A=1227861/R=0/*http:/ads.track-star.com/linker.ts?ts=1;2;312;3 _2_11> <http://us.adserver.yahoo.com/l?M=233214.2377745.3805144.1261774/D=egrou pmail/S=:HM/A=1227861/rand=478906098> To Post a message to the group, send it to: disklavier@... To Post a private message to Todd Muncy, the group's founder and moderator, send it to: disklavier-owner@... To reach our group's web site go to: http://Yahoogroups.com/group/disklavier Todd's family web site was completely rewritten in June 2001 and contains some fun disklavier content and links to midi sites among other things, The url is: http://MuncyFamily.com THINKING OF LEAVING THE GROUP? If you are thinking of unsubcribing because you are getting too much mail, go the the web site and change your email delivery option instead. That will fix the problem, while maintaining your access to the group. If you insist on leaving us completely send a blank email to: disklavier-unsubscribe@... Know someone who wants to join? Have them send a blank email to: disklavier-subscribe@... or give them this link: http://Yahoogroups.com/group/disklavier/join Your use of Yahoo! Groups is subject to the Yahoo! <http://docs.yahoo.com/info/terms/> Terms of Service.
Message
RE: [disklavier] W32.Klez.H@mm Virus (Worm)
2002-09-22 by Todd Muncy
Attachments
- No local attachments were found for this message.