Yahoo Groups archive

Disklavier

Index last updated: 2026-04-28 23:20 UTC

Message

RE: [disklavier] W32.Klez.H@mm Virus (Worm)

2002-09-22 by Todd Muncy

Jim,

I also get this virus emailed to me several times a week, although it is
slowing down lately.  You are correct that it changes the "reply to"
address (usually to someone else in the infected senders address book),
but if you are using Outlook (not express), you can right click on the
email and choose "options".  This will allow you to examine the complete
path of travel the email took, including the true email address of the
infected sender.  In OE express I think you can do the same thing, but
it is labeled properties instead of options.  Play around with it and
you'll discover the source.  In my case there were several, all friends
and relatives that were fairly new to computers and the internet.  I was
listed as the "reply to" on several infected emails that went to others,
leading to accusations from other friends and relatives that I was the
sender.  Happy hunting.

 

Todd Muncy

http://MuncyFamily.com <http://muncyfamily.com/>  

 

-----Original Message-----
From: jimgerren [mailto:jimgerren@...] 
Sent: Saturday, September 21, 2002 12:26 AM
To: disklavier@yahoogroups.com
Subject: [disklavier] W32.Klez.H@mm Virus (Worm)

 

Dear Friends,

For the past three weeks I have been bombarded by receiving mail 
containing the W32.Klez.H@mm worm.  Fortunately, Norton Anti-virus 
catches and quarantines the email before it has a chance to do any 
harm to my PC.  Unfortunately, this worm is very illusive.  You can 
never find out the origin (who is sending the email) because the worm 
is intelligent enough to change the "FROM" identification.  
Additionally, it can choose from numerous subject lines, and is 
almost never the same subject twice.  This worm can be extremely 
harmful, and sends out emails to people you have stored in your 
address book without you ever knowing.  On the positive side, 
SYMANTEC (Norton) has developed a tool which can be downloaded to 
check and rid your PC of the virus should it be hiding on your PC.  
The file is quite small so the download time is fast.  The following 
link describes how destructive this worm is, how it works, and has 
the tool for downloading and eliminating the worm should it reside on 
your PC.  Although I have not been harmed by this worm/virus, I'm 
sure others who don't have the latest virus software have.  And every 
time Norton catches an infected email (once or twice daily) I get a 
very uncomfortable feeling.  I would appreciate it if you would all 
make the effort and take the time to check your PC.  It doesn't take 
all that long.

http://securityresponse.symantec.com/avcenter/venc/data/w32.klez.remov
al.tool.html

Thanks,
Jim Gerren







Yahoo! Groups Sponsor



ADVERTISEMENT
 
<http://rd.yahoo.com/M=233214.2377745.3805144.1261774/D=egroupweb/S=1705
032012:HM/A=1227861/R=0/*http:/ads.track-star.com/linker.ts?ts=1;2;312;3
_2_11> 


 
<http://us.adserver.yahoo.com/l?M=233214.2377745.3805144.1261774/D=egrou
pmail/S=:HM/A=1227861/rand=478906098> 


To Post a message to the group, send it to:   disklavier@...

To Post a private message to Todd Muncy, the group's founder and
moderator, send it to:
disklavier-owner@...

To reach our group's web site go to:
http://Yahoogroups.com/group/disklavier

Todd's family web site was completely rewritten in June 2001 and
contains some fun disklavier content and links to midi sites among other
things, The url is:
http://MuncyFamily.com

THINKING OF LEAVING THE GROUP?
If you are thinking of unsubcribing because you are getting too much
mail, go the the web site and change your email delivery option instead.
That will fix the problem, while maintaining your access to the group.
If you insist on leaving us completely send a blank email to:
disklavier-unsubscribe@...

Know someone who wants to join?  Have them send a blank email to:
disklavier-subscribe@... or give them this link:
http://Yahoogroups.com/group/disklavier/join


Your use of Yahoo! Groups is subject to the Yahoo!
<http://docs.yahoo.com/info/terms/>  Terms of Service.

Attachments

Move to quarantaine

This moves the raw source file on disk only. The archive index is not changed automatically, so you still need to run a manual refresh afterward.