RE: What a nasty little bug

["John Guyer" <johnguy@moscow.com>]

Symantec has released a removal tool to the general public.  You do not
need to own their software to use this.  There are others, but this one
works very well.  Pay very close attention to the instructions as they
do matter.

http://securityresponse.symantec.com/avcenter/venc/data/w32.klez.removal
.tool.html

John B. Guyer
. . . . . . . . . . . . . . . . .
208.882.6584
johnguy@moscow.com
. . . . . . . . . . . . . . . . .


-----Original Message-----
From: Mike Curley [mailto:curley@turbonet.com] 
Sent: Tuesday, May 07, 2002 10:16 AM
To: Vision2020; John Danahy
Subject: Re: What a nasty little bug


Anyone have details on how to check for it?
Mike Curley


On 6 May 02, at 22:31, John Danahy wrote:

Date forwarded: 	Tue, 7 May 2002 06:06:36 -0700 (PDT)
From:           	"John Danahy" <JDANAHY@turbonet.com>
To:             	"Vision2020" <vision2020@moscow.com>
Subject:        	What a nasty little bug
Date sent:      	Mon, 6 May 2002 22:31:23 -0700
Forwarded by:   	vision2020@moscow.com

Lois Melina contacted me and told me First Step had
identified me as the sender of a virus to her.  the virus is the
w32.klex.e worm.  After spending a couple of hours checking and
rechecking, I determined that I am clean.

  However, my research showed me that this nasty little 
worm
  can pick an
address at random from an infected machine and send e-
mails
with the random address listed as from.  IE:Someone's
infected machine could send you an email and say it was 
from
me, if it could find my email address anywhere on the
infected machine.

I send this out as a warning, someone out there is infected, and you
could be getting it from anyone.

John Danahy
jdanahy@turbonet.com