Forum Home
Press F1
Thread ID: 19052	2002-05-07 11:36:00	Klez -Warning	Guest (0)	Press F1

Post ID	Timestamp	Content	User
47653	2002-05-07 11:36:00	If you receive an email from the Christchurch City Council it will more than likely have the klez worm attached to it. I received the following from soa@ccc.govt.nz 'Klez.E is the most common world-wide spreading worm.It's very dangerous by corrupting your files. Because of its very smart stealth and anti-anti-virus technic,most common AV software can't detect or clean it. We developed this free immunity tool to defeat the malicious virus. You only need to run this tool once,and then Klez will never come into your PC. NOTE: Because this tool acts as a fake Klez to fool the real worm,some AV monitor maybe cry when you run it. If so,Ignore the warning,and select 'continue'. If you have any question,please mail to me.' I of course didn't view or run this attachment but the stupid %$#@% at the CCC did.	Guest (0)
47654	2002-05-07 20:24:00	Ha ha .. i'm not surprised, having dealt with the council... nuff said. Are you sure that it came from them? klez likes to pick random names from the senders address book. The first one of these i got appeared to come from myself! Checking the headers showed 'Return-Path: <xxxxxxxxxxxx@xtra.co.nz>' which was an address of a friend of mine, who i then rung up and found he had just gone online a few minutes ago. Sneaky little bugger this klez!	Guest (0)
47655	2002-05-07 21:21:00	Before you blame the CCC for sending you the klez virus, it should be noted that the senders address is probably false and the real sender, whether intentional or because they are infected probably have CCC as one of the contacts in there address book. Too late now if you have deleted the message but the return path found in message source will give you a better clue who the real sender might be.	Guest (0)
47656	2002-05-08 00:02:00	Yes I checked the return field before I posted my original message. The originator was indeed the CCC.	Guest (0)
1