• Post Reply Bookmark Topic Watch Topic
  • New Topic

Virus Warning  RSS feed

 
Dan Chisholm
Ranch Hand
Posts: 1865
  • Mark post as helpful
  • send pies
  • Quote
  • Report post to moderator
I just received an email from the following address.
wbrogden@bga.com
The subject was as follows: "Hi,danchisholm,so cool a flash,enjoy it".
Norton Antivirus displayed the following warning.
This file: "Unknown047b.data" was infected with: "W32.Klez.H@mm" virus.
The file was deleted by Norton AntiVirus. Thursday, October 17, 2002 17:02
I assume that this virus will be making the rounds among those that are studying for the Java Certification so this is probably a good place to post a warning.
 
Guy Allard
Ranch Hand
Posts: 776
  • Mark post as helpful
  • send pies
  • Quote
  • Report post to moderator
Hi - klez has been rampant since April of 2002. Google, you will get bunches of hits.
Any well known and regularly updated AV software will not let the payload in to your mail (payloads are variously named .exe, .bat, ... attachments).
The subject lines are varied. Your AV provider can give you a list of them.
The particular recipient (Dan Chisolm) and (bogus) sender Bill Brogden do not (necessarily) have klez. (It would be highly amusing if Bill did!)
But someone who has both your e-mail addresses does!
With Outlook you can perhaps narrow this down - select the email, right click, selct options. You should be able to tell the originating mail server name (but not the real sender).
In my particular environment, all of my 'firends' who have it are sitting behind gtcom servers.
The real, total, and final solution: install Linux.
Regards and HTH, Guy
 
Dan Chisholm
Ranch Hand
Posts: 1865
  • Mark post as helpful
  • send pies
  • Quote
  • Report post to moderator
Originally posted by Guy Allard:

The particular recipient (Dan Chisolm) and (bogus) sender Bill Brogden do not (necessarily) have klez. (It would be highly amusing if Bill did!)
But someone who has both your e-mail addresses does!

Yes, I just received an email from Bill that confirms that his outgoing email passes through Norton AV so the return address is no doubt spoofed.
I hope everyone out there has updated their AV software recently.
 
Valentin Crettaz
Gold Digger
Sheriff
Posts: 7610
  • Mark post as helpful
  • send pies
  • Quote
  • Report post to moderator
Does the SCJP exam handle viruses now? Nah, I don't think so
Moving this to the Javaranch forum...
 
  • Post Reply Bookmark Topic Watch Topic
  • New Topic
Boost this thread!