[Regia-NA] More on virii from Kim

J. K. Siddorn list-regia-na@lig.net
Fri, 21 Jun 2002 17:07:04 +0100


This is a multi-part message in MIME format.

------=_NextPart_000_008A_01C21946.114C8DB0
Content-Type: text/plain;
	charset="iso-8859-1"
Content-Transfer-Encoding: quoted-printable

A newsgroup I contribute too may be passing on infection. This is a =
recent posting from someone on that group.
=20
>>>>>>>>>>>>>
=20
These viruses get more crafty.
=20
I received two emails from myself yesterday, sent by an email address I =
only
use for incoming mail.
=20
The messages would have been sent by somebody else who has my address in
their address book.
=20
What the klez? virus does is send emails with (usually) two attachments =
one
is always about 93-96Kb in size, the other can be any old rubbish, but
usually looks like a load of java type code.
It picks an address from your address book and sends out the message =
using
the address it picked to look like the originator of the message.
=20
So somebody who has your address in their address book has got the =
virus.
=20
If other people on this NG start to receive these, then it may be =
assumed
that some body who is either on the NG or visits stationary engine =
sites,
has got this virus and does not know it. They will soon though, as it =
will
start eating system files.
=20
If you still do not have antiviral software, and don't fancy paying for =
it,
there is a free edition version (no frills but does the job!) of AVG
antiviral. This is downloadable from-
=20
www.grisoft.com
=20
I use it and it seems to work as well as Norton did when I had that.

Regards,


Kim Siddorn.

The early bird may get the worm -
but the second mouse gets the cheese!=20



------=_NextPart_000_008A_01C21946.114C8DB0
Content-Type: text/html;
	charset="iso-8859-1"
Content-Transfer-Encoding: quoted-printable

<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN">
<HTML><HEAD>
<META http-equiv=3DContent-Type content=3D"text/html; =
charset=3Diso-8859-1">
<META content=3D"MSHTML 5.50.4522.1800" name=3DGENERATOR>
<STYLE></STYLE>
</HEAD>
<BODY bgColor=3D#ffffff>
<DIV><FONT face=3DGaramond><PRE>A newsgroup I contribute too may be =
passing on infection. This is a recent posting from someone on that =
group.</PRE><PRE>&nbsp;<?xml:namespace prefix =3D o ns =3D =
"urn:schemas-microsoft-com:office:office" =
/><o:p></o:p></PRE><PRE>&gt;&gt;&gt;&gt;&gt;&gt;&gt;&gt;&gt;&gt;&gt;&gt;&=
gt;</PRE><PRE>&nbsp;<o:p></o:p></PRE><PRE>These viruses get more =
crafty.<o:p></o:p></PRE><PRE>&nbsp;<o:p></o:p></PRE><PRE>I received two =
emails from myself yesterday, sent by an email address I =
only<o:p></o:p></PRE><PRE>use for incoming =
mail.<o:p></o:p></PRE><PRE>&nbsp;<o:p></o:p></PRE><PRE>The messages =
would have been sent by somebody else who has my address =
in<o:p></o:p></PRE><PRE>their address =
book.<o:p></o:p></PRE><PRE>&nbsp;<o:p></o:p></PRE><PRE>What the klez? =
virus does is send emails with (usually) two attachments =
one<o:p></o:p></PRE><PRE>is always about 93-96Kb in size, the other can =
be any old rubbish, but<o:p></o:p></PRE><PRE>usually looks like a load =
of java type code.<o:p></o:p></PRE><PRE>It picks an address from your =
address book and sends out the message using<o:p></o:p></PRE><PRE>the =
address it picked to look like the originator of the =
message.<o:p></o:p></PRE><PRE>&nbsp;<o:p></o:p></PRE><PRE>So somebody =
who has your address in their address book has got the =
virus.<o:p></o:p></PRE><PRE>&nbsp;<o:p></o:p></PRE><PRE>If other people =
on this NG start to receive these, then it may be =
assumed<o:p></o:p></PRE><PRE>that some body who is either on the NG or =
visits stationary engine sites,<o:p></o:p></PRE><PRE>has got this virus =
and does not know it. They will soon though, as it =
will<o:p></o:p></PRE><PRE>start eating system =
files.<o:p></o:p></PRE><PRE>&nbsp;<o:p></o:p></PRE><PRE>If you still do =
not have antiviral software, and don't fancy paying for =
it,<o:p></o:p></PRE><PRE>there is a free edition version (no frills but =
does the job!) of AVG<o:p></o:p></PRE><PRE>antiviral. This is =
downloadable =
from-<o:p></o:p></PRE><PRE>&nbsp;<o:p></o:p></PRE><PRE>www.grisoft.com<o:=
p></o:p></PRE><PRE>&nbsp;<o:p></o:p></PRE><PRE>I use it and it seems to =
work as well as Norton did when I had =
that.<o:p></o:p></PRE></FONT></DIV><FONT=20
face=3DGaramond>
<DIV><BR>Regards,</DIV>
<DIV>&nbsp;</DIV>
<DIV><BR>Kim Siddorn.</DIV>
<DIV>&nbsp;</DIV>
<DIV>The early bird may get the worm -<BR>but the second mouse gets the =
cheese!=20
</DIV>
<DIV>&nbsp;</DIV>
<DIV></FONT>&nbsp;</DIV></BODY></HTML>

------=_NextPart_000_008A_01C21946.114C8DB0--