View Full Version : POSSIBLE VIRUS ALERT !!!
There is a VIRUS going around that basically grabs your address book and sends itself on.
While I positively know that they are NOT at fault, I have been receiving e-mail with attachments from various supposed origins as webmaster@playpool.com and tournament@playpool.com
If you receive these e-mails, DO NOT OPEN the attachment.
I have looked at the headers and the real origin appears to be RJRydell@AOL.Com
I suggest copying the header data and forwarding the abusive e-mail to AOL at TOSEmail1@aol.com if you think the origin is an AOL user.
Troy
TomBrooklyn
08-11-2002, 10:42 PM
What is the file name of the attachment?
I didn't open the attachment and I didn't keep it very long, but I think one was something like "krez". Sorry I can't be more specific.
<blockquote><font class="small">Quote: TomBrooklyn:</font><hr> What is the file name of the attachment? <hr></blockquote>
The Klez worm has been going around the CCB since May 24. I have received over 20 of them with a return path of anitamon@earthlink.net. The from line varies and is often a known CCBer. That line is not the sender but just a name that the worm has gotten and puts in at random.
I've never gotten the attachment so perhaps my e-mail filters it out. My understanding is that the attachment is very damaging if it is run. The e-mail seems to consist of around 70 pages of code that does not display on the screen and seems to be harmless. I assume that is what steals your address book and then uses the names to make people think that someone they know has sent the message.
I sent many complaints to earthlink and they never responded but the messages continued. I sent them the headers and then I sent them the whole message and they refused to accept it because it was too long. They didn't mind that I was getting one or two of those long messages every day. They stopped a few weeks ago but I suppose these new ones will begin now.
KenCT
bluewolf
08-12-2002, 09:04 AM
the klez virus is alive and well. it goes away for a few days or a week then comes back. and it does use your address book especially if you use outlook. i am thinking of switching to netscape for that reason.
even though my norton was catching alot of it, i dl the fix it tool from symantec.com. it searches your whole computer including the registry for it and then gets rid of it.
bluewolf
Powered by vBulletin® Version 4.2.0 Copyright © 2013 vBulletin Solutions, Inc. All rights reserved.