[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
[pct-l] Klez virus
At 05:23 PM 5/16/02, John Musielewicz wrote:
>Just to let you all know there is a virus going around which Norton doesn't
>detect. I just got a email with brick listed as the sender and [pct-l] in
>the subject. It had an attachment. I don't know if it was a virus I deleted
>it because it was slightly fishy. I hope no one on this list is sending out
>viruses. Is it possible to send attachments to this mailing list?
I got a copy of the virus too, but I didn't send it.
Klez forges the "from" header.My copy of McAfee grabbed it.
the infected computer is using the connection putc12161208075.cts.com [220.127.116.11]
FWIW I also got the same virus from the same IP address, but the from "header" was
From: Bighummel <Bighummel@aol.com>
I am surprised that StripMime didn't strip the virus, especially since the header "X-StripMime: Non-text section removed by stripmime" was in the message
Brick Robbins mailto:firstname.lastname@example.org