W3C home > Mailing lists > Public > www-webdav-dasl@w3.org > April to June 2002

RE: Don't read "date" message

From: Dennis E. Hamilton <dennis.hamilton@acm.org>
Date: Wed, 1 May 2002 22:14:49 -0700
To: "Jim Whitehead \(by way of \"Ralph R. Swick\" <swick@w3.org>\)" <ejw@cse.ucsc.edu>, <www-webdav-dasl@w3.org>
Message-ID: <NGBBIKAHMDNFPKNEPALEGEAFIHAA.dennis.hamilton@acm.org>
Exactly right.

Klez has the devious provision of using the address book of an infected
system to falsify senders as well as identify new prospective hosts.  This
makes it harder to identify the actual sending system and let someone know
about it.

-----Original Message-----
From: www-webdav-dasl-request@w3.org
[mailto:www-webdav-dasl-request@w3.org]On Behalf Of Jim Whitehead (by
way of "Ralph R. Swick" <swick@w3.org>)
Sent: Wednesday, May 01, 2002 07:09
To: www-webdav-dasl@w3.org
Subject: Don't read "date" message

[oops, caught in spam filter -rrs]

Date: Tue, 30 Apr 2002 14:25:49 -0400 (EDT)
From: "Jim Whitehead" <ejw@cse.ucsc.edu>
To: <www-webdav-dasl@w3.org>

Hi all,

I believe the message just sent out from "ejw" with subject "date" is a
message infected with the Klez virus. Don't read it, or execute the

I'm not quite sure how it got sent -- I never send messages with the name
set to "ejw", and the email address is "ejw@ics.uci.edu", my old UCI email
address. I ran a virus check onmy machine for Klez, and it cam eup negative.
I think it must have been sent from someone else's infected computer, one
that had my old UCI email address in its address book.

- Jim
Received on Thursday, 2 May 2002 01:15:23 UTC

This archive was generated by hypermail 2.3.1 : Tuesday, 6 January 2015 20:22:43 UTC