I’ve been getting emailes about twice a week from my ISP. They say someone has tried to send me an email from semo.net, but it’s been blocked because it contains the W32/Klez.H@mm virus.
Just curious if it was someone from here trying to email me.
I’ve also wondered if it was spam, and the spammer just didn’t know they had a virus.
Beggars should be abolished. It annoys one to give to them, and it annoys one not to give to them. [Nietzsche]
Join some of the most experienced and recognized building professionals for two days of presentations, panel discussions, networking, and more.
"I have learned so much thanks to the searchable articles on the FHB website. I can confidently say that I expect to be a life-long subscriber." - M.K.
Dig into cutting-edge approaches and decades of proven solutions with total access to our experts and tradespeople.
Start Free Trial NowGet instant access to the latest developments in green building, research, and reports from the field.
Start Free Trial Now
Replies
None of the above.
SOMEONE, SOMEWHERE has the W32/Klez virus.
The infected computer harves email address from the more common address books. Also it search the browser caches for email address.
It selects one of the address that it finds as a from and other for the to address. Then it sets up a fake "postoffice" to send out the email.
That makes the source untracable.
Earlier version used generic subjects like; "This is the info you requested" or "Hello again".
Latter versions have gotten smarter and picks out a subject from the cache. So you might find a one with a "truss info" or "drywall painting" in the subject. The subject is often a clue as to the forum or email list where the infect person "lives on line".
The person from semo.net is not the one with the problem. It is just that you and him/her/it are in 3rd persons address book.
BTW, semo.net is Southeastern Missouri.
Thanks for the info. Didn't know that the email address might be made up by the virus. But what you're telling me makes sense - Some of the subject lines have had the word "truss" in them.
So is there any way to tell who they're actually from? By working faithfully eight hours a day you may eventually get to work twelve hours a day. [Robert Frost]
"So is there any way to tell who they're actually from? "
AFAIK, no.
I use spamcop.net a on a few of them to decode actual source. It works most of the time on spam.
But they I would send an email warning that they might have a virus. But all I ever got was bounces backs.
My suggestion is that you post a virus warning in the tavern and anyother forums or news groups that you particpate in.
A last summer I started notice ones with woodworking subjects and post a notice on Badger Pond a woodworkign forum that I frequent. Once I posted the notice many others said that they where getting the same things and other started checking their computer and some found the virus.
Here is a link about the virus. Do a google on "w32 klez virus" and you will get lot of info about it and how to check if you machine has it.
http://www.symantec.com/avcenter/venc/data/[email protected]
Edited 12/6/2002 12:47:14 PM ET by Bill Hartmann
O.K., I got some info from my ISP about this.
They said the last email I got was from the IP address 216.41.128.73.
He also said the IP address was from a service in Poplar Bluff.
Any of that sound familiar to anyone? I've been getting these notices about once a day. Hate knowing someone has a virus and not being able to let them know.
Congress spends like a drunk sailor, and that's unfair for two reasons. The sailor spends his own money, and, eventually, he sobers up. [Richard Nixon]