From: Dave Ball (vought@msn.com)
Date: Thu Apr 25 2002 - 17:25:00 PDT
IHC53 Hi
I received an email from you with a subject of Questionnaire and an
attachment that was a .BAT file called ONLO. It carries a worm payload.
There is a repair for the worm you sent out called W32.klez.gen@mm..... I
have yesterdays DAT files from Symantec (Norton) and it can not clean this
worm only quarantine it. You need to repair your system and clean it by
going to this address:
http://securityresponse.symantec.com/avcenter/venc/data/w32.klez.gen@mm.html
You should as a practice block files that are executable unless you know
who they are from and even then copy them to your hard drive and scan them.
Your system is sending this worm please look in your address list and remove
me (vought@msn.com) this worm has its own SMTP system and you are forwarding
this worm. Also check and see if you are automatically saving addresses to
your address book this can be a bummer for those on this list because you
will reach out and touch everyone.
I could send you the mail with the attachment back but that would not be
good because you will only MAPI this everywhere because it also spreads
through shared networks and local drives and static DSL connections.
Thanks
Also this is not meant to be anything other than a friendly warning with
suggestive help : )
Dave Ball
vought@msn.com
----- Original Message -----
From: IHC53
To: Dave Ball
Sent: Thursday, April 25, 2002 1:27 PM
Subject: Re: who are you!!!
Its not me, but Nortons detected it.
----- Original Message -----
From: Dave Ball
To: ihc53@bellsouth.net
Sent: Thursday, April 25, 2002 4:35 PM
Subject: who are you!!!
You are sending out a worm virus!!!!!
Dave
This archive was generated by hypermail 2.1.4 : Tue May 21 2002 - 23:25:44 PDT