Re: [foxboro] viruses

Hey List,

The Klez virus "spoofs" the reply-to address in the email, but you can get a
"feel" of who is infected and sent you this email by looking at the email
header hidden inside the email.
This assumes that you have a version of IE that doesn't allow you to get
infected.
In Outlook, open the email, Choose "Options" under the "View" menu pick.
You will see the internet route of that the email.
The first line should tell you the ISP name or domain name of who sent the
email.
I have identified many infect-ees this way.



Here is some other useful info on this virus:
1. This virus infects those who have Microsoft Internet Explorer ver 5.01 or
5.5 without SP2.
2. This Klez virus has become very rampant.  See
http://www.mcafee.com/anti-virus/viruses/klez/
3. You can scan your PC for this virus (and others) for free at:
http://www.earthlink.com/freescan/
4. There is a free removal tool for the klez virus at:
http://www.symantec.com/avcenter/venc/data/w32.klez.removal.tool.html
5. Update your IE, Office, and Windows if you haven't already!  This is a
free service from Microsoft.  http://windowsupdate.microsoft.com







-----Original Message-----
From: foxboro-bounce@xxxxxxxxxxxxx
[mailto:foxboro-bounce@xxxxxxxxxxxxx]On Behalf Of
kevin.fitzgerrell@xxxxxxxxxxxx
Sent: Monday, August 26, 2002 11:09 PM
To: foxboro@xxxxxxxxxxxxx
Subject: [foxboro] viruses




Hi all,

I've been getting the usual assortment of emails lately infected with
W32.Klez viruses.  Most have meaningless attachments and fake headers so
it's hard to tell where they are coming from, but a few recently have had
Foxboro info attached, such as the following snippet of spreadsheet.

BHELOIL220TRIP.xls

BHELOIL2
Default             U1100_DCS_     07U1100_DC      S_09U1100_
Start Date = 07/23/02    SV2222          11TG3A_S  11TG3V_RS
Start Time = 00:03:00    CIN       PNT        PNT
Total Time = 5mins            AMP        WATT
Period = 1secs lin  UTAW01    UTAW01     UTAW01
               histut         histut          histut
------------------------ ----------           ----------
----------
00:01:00       1         0.4688          29.531
00:00:59       1         0.4688          29.531

Anyway, if any of this looks familiar it's probably time to update virus
checking software.

Apologies for bothering the rest of the group!

Regards,

Kevin FitzGerrell
Systems Engineer
Foxboro New Zealand
------------------------------------
Tel:  +64 (9) 573 7690
Fax:  +64 (9) 573 7691



_______________________________________________________________________
This mailing list is neither sponsored nor endorsed by Invensys Process
Systems (formerly The Foxboro Company). Use the info you obtain here at
your own risks. Read http://www.thecassandraproject.org/disclaimer.html

foxboro mailing list:             http://www.freelists.org/list/foxboro
to subscribe:         mailto:foxboro-request@xxxxxxxxxxxxx?subject=join
to unsubscribe:      mailto:foxboro-request@xxxxxxxxxxxxx?subject=leave


 
 
_______________________________________________________________________
This mailing list is neither sponsored nor endorsed by Invensys Process
Systems (formerly The Foxboro Company). Use the info you obtain here at
your own risks. Read http://www.thecassandraproject.org/disclaimer.html
 
foxboro mailing list:             http://www.freelists.org/list/foxboro
to subscribe:         mailto:foxboro-request@xxxxxxxxxxxxx?subject=join
to unsubscribe:      mailto:foxboro-request@xxxxxxxxxxxxx?subject=leave

Other related posts: