RE: Don't read "date" message

Exactly right.

Klez has the devious provision of using the address book of an infected
system to falsify senders as well as identify new prospective hosts.  This
makes it harder to identify the actual sending system and let someone know
about it.

-----Original Message-----
From: www-webdav-dasl-request@w3.org
[mailto:www-webdav-dasl-request@w3.org]On Behalf Of Jim Whitehead (by
way of "Ralph R. Swick" <swick@w3.org>)
Sent: Wednesday, May 01, 2002 07:09
To: www-webdav-dasl@w3.org
Subject: Don't read "date" message


[oops, caught in spam filter -rrs]

Date: Tue, 30 Apr 2002 14:25:49 -0400 (EDT)
Message-ID: <AMEPKEBLDJJCCDEJHAMIGEGGELAA.ejw@cse.ucsc.edu>
From: "Jim Whitehead" <ejw@cse.ucsc.edu>
To: <www-webdav-dasl@w3.org>

Hi all,

I believe the message just sent out from "ejw" with subject "date" is a
message infected with the Klez virus. Don't read it, or execute the
attachment.

I'm not quite sure how it got sent -- I never send messages with the name
set to "ejw", and the email address is "ejw@ics.uci.edu", my old UCI email
address. I ran a virus check onmy machine for Klez, and it cam eup negative.
I think it must have been sent from someone else's infected computer, one
that had my old UCI email address in its address book.

- Jim

Received on Thursday, 2 May 2002 01:15:23 UTC