I have been Klezed 3 times in the past two days in emails disguised in some interesting ways, one as a return mail from chaski.com. Looks like somebody is using railroad related boards to spread this virus. Please be careful.

Dave

irondave@bellsouth.net

The yahoo groups site I moderate has had different screen names attached to someones email address. It's getting to be a real problem.

> I have been Klezed 3 times in the past two
> days in emails disguised in some interesting
> ways, one as a return mail from chaski.com.
> Looks like somebody is using railroad
> related boards to spread this virus. Please
> be careful.

> Dave

> The yahoo groups site I moderate has had
> different screen names attached to someones
> email address. It's getting to be a real
> problem.

To further elaborate, the boards themselves do not spread viruses. But what Klez does is to search (I'm not certain where) for e-mail addresses, and randomly place someone else's address in the FROM field in the message.

If you are recieving these messages in an e-mail program, some programs let you examine the message header. In the header, you can see the various servers that routed the message from their machine to yours. You will find that the mail server it originated from is not the mail provider for the person it is "from".

I believe it will also randomly assigns a subject matter as well from one of the messages in your inbox. One of the best ways to make sure you do not get infected is to use an online mail service such as Hotmail or Yahoo Mail, or an e-mail program other than Outlook. (I use Netscape Mail.)

-James Hefner
Hebrews 10:20a

Surviving World Steam Locomotives
james1@pernet.net

What I like is when Klez sends a message to a defunct e-mail address using my return address, and I get a notice for undeliverable mail for a message i didn't send.

> I have been Klezed 3 times in the past two
> days in emails disguised in some interesting
> ways, one as a return mail from chaski.com.
> Looks like somebody is using railroad
> related boards to spread this virus. Please
> be careful.

> Dave


RyPN Flimsies
hkading@rypn.org

Dave et all...

Why not just get an anti-virus program? You can get a FREE time limited demo from McAfee fer goodness sake! Our firm has been BARRAGED by the Klez variants, it hit servers at some of our clients. I counted 20 infected emails in one day, and NOT ONE GOT THROUGH and infected ANY of our machines.

I especially like the little cartoon of the hand holding the wiggling bug by the antennae that pops up with McAfee, asking "what do you want me to do with this?" But, unfortunatley, I need to switch our net over to Norton, it has automatic network update, i.e., less work for me and I don't have to worry about users disabling or not updating.

http://download.mcafee.com/eval/platform-language2.asp?l=0&prdc=27&s=HOME&o=10&zz=VirusScan&img=vscan_6x.jpg

I have Norton, and to my knowledge have never been infected by, or passed this STD to another soul.

But, that doesn't keep it (Sir Klez) from using your e-mail address, which it gets from other less well proteted peoples' address book.

RyPN Flimsies
hkading@rypn.org

Or keep other people from blaming you when you know very well it wasn't your system.

Now if we could EVERYONE to use anti-virus software........

Which will happen about the same time as all of us getting all the money we need for all our projects.

OK, Rudd, broke down and sprung for Norton. If I can do it impecunious as I am no excuse for anybody else. Your subtle hints paid off.

Dave

irondave@bellsouth.net