I know it is list policy to not send info about viruses, but this is a very sneaky virus that you need to be warned about. I received four different copies of it with different subject titles. Norton anti-virus (updated 5/6/02) didn't detect one of them. The attachment was named <<<<warn.txt>>>>. I even scanned it in Windows explorer and Norton said it was clean. Later in the day, I received a 4th copy of it that Norton did catch on the way in.
Following are the four different subject lines in came under:
Worm Klez.E immunity
Rights Reserved
A very new game
Tickets
It has the ability to put whatever address it wants in the "From" line while the original infected email address is listed as "Sender".
I use Eudora Pro.
Don't open or preview ANY attachments and update your anti-virus program every few days for a while.
Best,
John Gwilliam
At 02:19 AM 5/15/04 -0700, you wrote:
Hello All,
After becoming infected 2 days ago from a list member & losing 6 months of e-mails & other assorted data now I have received the same virus from the following address mailto:[EMAIL PROTECTED]
Below is the name of the virus & the name of the file. The strange thing is that I received it from the list address on an e-mail address that has never been used on the list.
Jim
James Hartman
Date: 5/13/04, Time: 22:28:58,
Virus scanning completed.
Items scanned: C:-D:
Date: 5/14/04, Time: 8:12:54,
Virus scanning completed.
Items scanned: C:-D:
Date: 5/15/04, Time: 2:01:24,
The file
C:\WINDOWS\SYSTEM\Winkpj.exe
is infected with the W32.Klez.H@mm virus.
Unable to repair this file.
Date: 5/15/04, Time: 2:01:32,
The file
C:\WINDOWS\SYSTEM\Winkpj.exe
was infected with the W32.Klez.H@mm virus.
The file was quarantined.
____________________________________________________
IncrediMail - Email has finally evolved - Click Here
John Gwilliam Meteorites PO Box 26854 Tempe AZ 85285 http://www.meteoriteimpact.com
