[BARC-List] Someone's infected

Hennessy, Edward SBCCOM(N) [email protected]
Wed, 28 Aug 2002 07:22:24 -0400


I realize this is somewhat off topic, but indulge me, please...

I just got a warning from a server that 'it appears that I am sending emails with the KLEZ worm' from my address at arrl.net.  Since I have the latest patches and anti-virus software, it's not coming from me.  Since the worm spoofs the 'from:' address,
and gets these from the infected computer, anyone who has my address in their address book may have sent it out.  Please check your PC.  If you don't have the latest data files for your antivirus software, and/or don't have IE service pack 2 installed,
you may be infected.

If you use Netscape, you have nothing to worry about.  It runs only through IE (version 5.0 or 5.5 without SP2).

See McAfee's information on the Klez worm at http://vil.nai.com/vil/content/v_99367.htm

Ed N1PBA