-=PCTechTalk=- Re: virus!! My Thoughts
- From: "cris" <cris@xxxxxxxxxxxxxxxx>
- To: <pctechtalk@xxxxxxxxxxxxx>
- Date: Mon, 27 Oct 2003 16:52:33 -0500
final thoughts -
copied below is part of the 1st message to the list about the virus (taken from
freelist site).
Eddie Carroll's computer was sent this with the klez virus on it. He replied to
the group, and his reply went to the group.
I opened his and fro - probably - From: "=^.^=" alienkc@xxxxxxxxxxxxx - the
other e-mail with the same subject line.
When I scanned my computer, those particular e-mails came up with iframe virus -
so - perhaps Eddie Carroll's computer has iframe on it - which is a totally
separate problem than the klez that showed up in the original e-mail that Eddie
received.
So - Eddie Carrol's anti-virus caught the klez - and it came from someone who
has pctech in their address book, and Eddie Carroll's name too. But, Eddie has
iframe.
make sense?
CrisS
~~~~~~~~~~~~~~~~~~~~~~~
a.. To: <pctechtalk@xxxxxxxxxxxxx>
b.. Subject: -=PCTechTalk=- Re: A WinXP patch
c.. From: "Eddie Carroll" <kd4bas@xxxxxxxxxxxxx>
d.. Date: Sun, 26 Oct 2003 19:47:29 -0600
--------------------------------------------------------------------------------
Is it just my PC or did this message have a virus attached. My Norton
showed W32.Klez.H@mm.
Eddie Carroll
KD4BAS / KIN9ET
First Responder
Level I Fire Service Instructor
Morganfield, KY Fire & Rescue
Incident Page Network KTY-005
National Incident Notification Network DKY-3
Storm Chasers of America # 74
ICQ# 149667298
http://www.geocities.com/nutcase1967
In memory of Dale Earnhardt,
"The Legend Lives on"
----- Original Message -----
From: "lailoken" <lailoken@xxxxxxxxxxxxx>
To: <pctechtalk@xxxxxxxxxxxxx>
Sent: Sunday, October 26, 2003 6:32 PM
Subject: -=PCTechTalk=- A WinXP patch
----- Original Message -----
From: "cris" <cris@xxxxxxxxxxxxxxxx>
To: <pctechtalk@xxxxxxxxxxxxx>
Sent: Monday, October 27, 2003 4:37 PM
Subject: -=PCTechTalk=- Re: virus!! My Thoughts
my norton didn't pop up. I scanned with PANDA online, and it said it disinfected
my e-mails - from iframe - but it didn't find any viruses or anything on any
parts of my computer - just those e-mails. and we don't even know if they were
truly infected - and some got klez and I got iframe -
when in doubt, I'd scan, just to be sure! Doubtful it will find anything, but
I'd always rather be safe than sorry, and I always scan online if something is
suspicious, in case it has corrupted my computer's virus detection.
Cris
----- Original Message -----
From: "Jeff Ross" <jross@xxxxxxxxxxxxxxxxxxx>
To: <pctechtalk@xxxxxxxxxxxxx>
Sent: Monday, October 27, 2003 4:27 PM
Subject: -=PCTechTalk=- Re: virus!! My Thoughts
Should I be worried. We have McAfee ASaP in our sonic wall and nothing has
come up being Klez. Should I scan, myself, or not be concerned? Just got in
on this.
----- Original Message -----
From: "~OoO~" <SirTroth@xxxxxxxxxxxxxx>
To: <pctechtalk@xxxxxxxxxxxxx>
Sent: Monday, October 27, 2003 3:17 PM
Subject: -=PCTechTalk=- Re: virus!! My Thoughts
> Here's how you can tell if its coming from the list or not... hit the
REPLY button to the email, and see if the return message your composing gets
addressed to PCTechTalk.
> ::: Troth :::
> ______________________
> ICQ: 1717439
> MSN: SirTroth@xxxxxxxxxxx
> Yahoo IM: SirTroth
> AIM/AOL: SirTrothX
> ______________________
>
>
> ::: Original Message
> ::: Sent Mon, 27 Oct 2003 11:37:05 -0800 (PST) by Glen
> | My thought on the virus....
> | Since it is the Klez virus, then the headers are
> | forged. The only way to tell who it is from is by the
> | originator's IP.
> |
> | Second...
> | I don't think this virus came through the list.
> | I suspect one of our members is infected and they
> | probably use outlook or outlook express.
> |
> | Since this is a list everytime some replies or post to
> | the list, their emails will sit in someones inbox.
> | Lets say outlook. Klez scans all folders in outlook
> | for email address, then starts mailing itself out.
> |
> | Now that Klez is sending out the virus to everyone
> | that posted to PCTechTalk. Since PCTechTalk is put in
> | the subject line by FreeList and nearly everyone has
> | filters set up on incoming email to drop PCTechTalk
> | emails to a specific folder, then this looks like it
> | is coming from PCTechTalk.
> |
> | Just my thoughts.
> |
> | Glen
> |
> |
> | --- ~OoO~ <SirTroth@xxxxxxxxxxxxxx> wrote:
> | > Its not attached though, or at least I don't think
> | > so. Attachments should be dropped. I got the message
> | > to, but not with an attachment. Maybe its reading
> | > the binary of the attachment and dropping it into
> | > the message as text, hence all the crazy letters...
> | > and virus scanners I believe can read the binary as
> | > well, and hence the scanner catching it.
> | > Arghhh.... whatever... as long as I don't get
> | > infected.
> | >
> | > :::Troth :::
> | > ____________________________________
> |
> |
> | __________________________________
> | Do you Yahoo!?
> | The New Yahoo! Shopping - with improved product search
> | http://shopping.yahoo.com
> | To unsub or change your email settings:
> | //www.freelists.org/webpage/pctechtalk
> |
> | To access our Archives:
> | http://groups.yahoo.com/group/PCTechTalk/messages/
> | //www.freelists.org/archives/pctechtalk/
> |
> | For more info:
> | //www.freelists.org/cgi-bin/list?list_id=pctechtalk
>
>
> To unsub or change your email settings:
> //www.freelists.org/webpage/pctechtalk
>
> To access our Archives:
> http://groups.yahoo.com/group/PCTechTalk/messages/
> //www.freelists.org/archives/pctechtalk/
>
> For more info:
> //www.freelists.org/cgi-bin/list?list_id=pctechtalk
>
To unsub or change your email settings:
//www.freelists.org/webpage/pctechtalk
To access our Archives:
http://groups.yahoo.com/group/PCTechTalk/messages/
//www.freelists.org/archives/pctechtalk/
For more info:
//www.freelists.org/cgi-bin/list?list_id=pctechtalk
To unsub or change your email settings:
//www.freelists.org/webpage/pctechtalk
To access our Archives:
http://groups.yahoo.com/group/PCTechTalk/messages/
//www.freelists.org/archives/pctechtalk/
For more info:
//www.freelists.org/cgi-bin/list?list_id=pctechtalk
To unsub or change your email settings:
//www.freelists.org/webpage/pctechtalk
To access our Archives:
http://groups.yahoo.com/group/PCTechTalk/messages/
//www.freelists.org/archives/pctechtalk/
For more info:
//www.freelists.org/cgi-bin/list?list_id=pctechtalk
Other related posts:
