Just a note....

[David A. Bandel]

On Tue, 23 Apr 2002 09:22:25 -0500
begin  Bill Day <bill at daysdomain.com> spewed forth:

This is the klez virus.  It's a bad one (for those unfortunates who are
running Windoze).  I've received maybe 50 or so such e-mails.  They always
have an executable (but the name is always different, like rock.exe,
width.exe, etc.

This one is a bitch to clean, too.  Suggestion: reformat and install Linux
and be done with crap like this.

> Somone on the list with their WinClient is currently infected with a
> email worm virus.
> 
> Currently little info is known about the worm.  Doug has determined that
> it may contain its own SMTP code and it picking addreses at random.
> 
> Currently I have recieved 3 different subjects all fromt he same system:
> Received: from imsp074.netvigator.com (imsp074.netvigator.com 
> [218.102.23.129])
> 
> Subjects so far:
> Subject: Is a registered trademark of Linus Torvalds
> Subject: Congratulations
> Subject: Re:bill,let's be friends   #the name will change as it is using
> the address book of whoever is infected.
> 
> So far the spoofed addresses I have recieved are as follows:
> From: xcyber <xcyber at linux-sxs.org>
> From: submissions <submissions at linux-sxs.org>
> From: burns <burns at linux-sxs.org>
> From: langson <langson at pub.dgnet.gd.cn>
> From: doug <doug at linux-sxs.org>
> 
> Thos of you using Lookout/Express check your sent folder and update your
> virsu scanners for the windoze boxen.  Not sure what all it does at this
> point as I havent had time to dig into it.  Doug may be looking more
> into at this point.
> 

Ciao,

David A. Bandel
-- 
Focus on the dream, not the competition.
		-- Nemesis Racing Team motto