Disklavier

Dear Friends,
 
For the past three weeks I have been bombarded by receiving mail 
containing the W32.Klez.H@mm worm.  Fortunately, Norton Anti-virus 
catches and quarantines the email before it has a chance to do any 
harm to my PC.  Unfortunately, this worm is very illusive.  You can 
never find out the origin (who is sending the email) because the worm 
is intelligent enough to change the "FROM" identification.  
Additionally, it can choose from numerous subject lines, and is 
almost never the same subject twice.  This worm can be extremely 
harmful, and sends out emails to people you have stored in your 
address book without you ever knowing.  On the positive side, 
SYMANTEC (Norton) has developed a tool which can be downloaded to 
check and rid your PC of the virus should it be hiding on your PC.  
The file is quite small so the download time is fast.  The following 
link describes how destructive this worm is, how it works, and has 
the tool for downloading and eliminating the worm should it reside on 
your PC.  Although I have not been harmed by this worm/virus, I'm 
sure others who don't have the latest virus software have.  And every 
time Norton catches an infected email (once or twice daily) I get a 
very uncomfortable feeling.  I would appreciate it if you would all 
make the effort and take the time to check your PC.  It doesn't take 
all that long.
 
http://securityresponse.symantec.com/avcenter/venc/data/w32.klez.remov
al.tool.html
 
Thanks,
Jim Gerren

Jim,

I also get this virus emailed to me several times a week, although it is
slowing down lately.  You are correct that it changes the "reply to"
address (usually to someone else in the infected senders address book),
but if you are using Outlook (not express), you can right click on the
email and choose "options".  This will allow you to examine the complete
path of travel the email took, including the true email address of the
infected sender.  In OE express I think you can do the same thing, but
it is labeled properties instead of options.  Play around with it and
you'll discover the source.  In my case there were several, all friends
and relatives that were fairly new to computers and the internet.  I was
listed as the "reply to" on several infected emails that went to others,
leading to accusations from other friends and relatives that I was the
sender.  Happy hunting.

 

Todd Muncy

http://MuncyFamily.com <http://muncyfamily.com/>  

-----Original Message-----
From: jimgerren [mailto:jimgerren@...] 
Sent: Saturday, September 21, 2002 12:26 AM
To: disklavier@yahoogroups.com
Subject: [disklavier] W32.Klez.H@mm Virus (Worm)

 

Dear Friends,

For the past three weeks I have been bombarded by receiving mail 
containing the W32.Klez.H@mm worm.  Fortunately, Norton Anti-virus 
catches and quarantines the email before it has a chance to do any 
harm to my PC.  Unfortunately, this worm is very illusive.  You can 
never find out the origin (who is sending the email) because the worm 
is intelligent enough to change the "FROM" identification.  
Additionally, it can choose from numerous subject lines, and is 
almost never the same subject twice.  This worm can be extremely 
harmful, and sends out emails to people you have stored in your 
address book without you ever knowing.  On the positive side, 
SYMANTEC (Norton) has developed a tool which can be downloaded to 
check and rid your PC of the virus should it be hiding on your PC.  
The file is quite small so the download time is fast.  The following 
link describes how destructive this worm is, how it works, and has 
the tool for downloading and eliminating the worm should it reside on 
your PC.  Although I have not been harmed by this worm/virus, I'm 
sure others who don't have the latest virus software have.  And every 
time Norton catches an infected email (once or twice daily) I get a 
very uncomfortable feeling.  I would appreciate it if you would all 
make the effort and take the time to check your PC.  It doesn't take 
all that long.

http://securityresponse.symantec.com/avcenter/venc/data/w32.klez.remov
al.tool.html

Thanks,
Jim Gerren







Yahoo! Groups Sponsor



ADVERTISEMENT
 
<http://rd.yahoo.com/M=233214.2377745.3805144.1261774/D=egroupweb/S=1705
032012:HM/A=1227861/R=0/*http:/ads.track-star.com/linker.ts?ts=1;2;312;3
_2_11> 


 
<http://us.adserver.yahoo.com/l?M=233214.2377745.3805144.1261774/D=egrou
pmail/S=:HM/A=1227861/rand=478906098> 


To Post a message to the group, send it to:   disklavier@...

To Post a private message to Todd Muncy, the group's founder and
moderator, send it to:
disklavier-owner@...

To reach our group's web site go to:
http://Yahoogroups.com/group/disklavier

Todd's family web site was completely rewritten in June 2001 and
contains some fun disklavier content and links to midi sites among other
things, The url is:
http://MuncyFamily.com

THINKING OF LEAVING THE GROUP?
If you are thinking of unsubcribing because you are getting too much
mail, go the the web site and change your email delivery option instead.
That will fix the problem, while maintaining your access to the group.
If you insist on leaving us completely send a blank email to:
disklavier-unsubscribe@...

Know someone who wants to join?  Have them send a blank email to:
disklavier-subscribe@... or give them this link:
http://Yahoogroups.com/group/disklavier/join


Your use of Yahoo! Groups is subject to the Yahoo!
<http://docs.yahoo.com/info/terms/>  Terms of Service.

One thing you can also do is add a "dummy" record to your Contact list on 
Outlook.  Make the name !0000 and give it fake email address.  Since 
Contacts are listed in alphabetical order, when the worm hits your list it 
gets stopped at the first record.  Beats having to email folks to say you're 
sorry!

Carol Beigel
crbrpt@...


_________________________________________________________________
Chat with friends online, try MSN Messenger: http://messenger.msn.com

Thanks for the input.  I now have a new address in my address list.
Chuck Muller

--- In disklavier@y..., "Carol Beigel" <carolrpt@h...> wrote:
> One thing you can also do is add a "dummy" record to your Contact 
list on 
> Outlook.  Make the name !0000 and give it fake email address.  
Since 
> Contacts are listed in alphabetical order, when the worm hits your 
list it 
> gets stopped at the first record.  Beats having to email folks to 
say you're 
> sorry!
> 
> Carol Beigel
> crbrpt@b...
> 
> 
> _________________________________________________________________
> Chat with friends online, try MSN Messenger: 
http://messenger.msn.com

Carol:

I am not infected with the virus.  Norton catches it and quarantines 
it before it can do any harm.  The PURPOSE of this email was to have 
people scan their computers for the virus and clean it up, should 
they have it.  Evidently, from the replies I've received, I didn't 
get that message across, even though I referred to the website where 
the tool can be downloaded to clean the PC of the virus.  I'm not 
sure how much clearer I could have been.  Obviously, I am on 
someone's address book who has the virus.  In reference to Todd 
Muncy's post, he must have been lucky as he was able to identify the 
sender. In my case I get approximately two of these infected emails 
daily and, unfortunately, looking at the properties, as Todd 
indicated, shows nobody with whom I am familiar.  In the past three 
weeks I have probably received approximately 40 of theses viruses. In 
fact, I just received one logging on this morning.  It's like having 
a plaque.  Again, it doesn't infect my PC due to Norton doing its 
job, but it does make me feel very uncomfortable.

Regards,
Jim Gerren