[TheForge] Possible Klez on your computer
Mike Spencer
[email protected]
Thu Sep 26 14:17:00 2002
I just got a copy of the Klez worm at my old ceci.mit.edu address that
has, as its bonus file, a tiny JPG image that looks like some kind of
iron object photographed on a quilt. The quilt pattern is red
boomerang-like shapes on a white ground. Internal text data inside
the image files says, "Created by AccuSoft Corp."
If you have a photo like this on your machine, you're probably
infected.
(FYI: Klez forges mail headers so it's essentially impossible to
determine the origin. It sends its infectous payload and also a
"bonus" file, randomly selected from the victim's HD. In this case,
the bonus file looks like it might have come from a blacksmith, thus
this message to TheForge.)
- Mike
---
Michael Spencer Nova Scotia, Canada
[email protected]
http://home.tallships.ca/mspencer/