It does appear to be the workings of a pretty well known virus. Earlier this
morning, Norton found this:
Sender of the infected attachment: postmaster
Recipient of the infected attachment: DC1, First Storage Group\Thomson Shore
Mailbox Stores, Steve Bostedor/Inbox
Subject of the message: Undeliverable mail--"Laboratories Cambridge"
One or more attachments were deleted.
Attachment ALT.scr was Deleted for the following reasons:
Virus W32.Klez.gen@mm was found.
I know that I'm not infected, but someone out there is and I'm on their list
of contacts. It also would be someone involved with or using VNC because so
many of the emails are VNC pages. It appears that they are sent to camouflage
the real virus when it comes in masquerading as a returned email. I'm hoping
that person is reading these posts and does something about it before I track
them down.
-Steve
-----Original Message-----
From: David Colliver [mailto:[EMAIL PROTECTED]]
Sent: Monday, April 22, 2002 8:39 AM
To: [EMAIL PROTECTED]
Subject: Re: Laboratories Cambridge
I have had 2 instances of Virii emailed to me. They autolaunch and try to
save to disk. These used an email address from mail.ru so I wonder... The
attachments were also HTML, though when I viewed the email source, there was
no HTML in there.
Be careful.
Regards.
Dave Colliver.
~~
All I ask is a chance to prove that money can't make me happy.
Collectible dolls from http://www.collectorsdolls.com
Web design? Web hosting? http://www.revilloc.com is the answer.
Tips, tricks and articles for programmers of all languages on
http://www.sourcecodecorner.com
Planning a wedding? http://www.bmcweddings.com
Advertise your car for free on http://www.drivingseat.com
----- Original Message -----
From: "Steve Bostedor" <[EMAIL PROTECTED]>
To: <[EMAIL PROTECTED]>
Sent: Monday, April 22, 2002 1:19 PM
Subject: FW: Laboratories Cambridge
> I've been getting a lot of these lately. Does anyone know why random =
> people are emailing me random pages from the VNC home page? I've had =
> like 20 in the last three days. It's almost like a virus or something. =
> I've emailed a few of them back and got replies like "I don't know". Am =
> I the only one?
> =20
> -Steve
> -----Original Message-----
> From: dezhurov [mailto:[EMAIL PROTECTED]]
> Sent: Monday, April 22, 2002 4:17 AM
> To: Steve Bostedor
> Subject: Laboratories Cambridge
>
> [demime 0.97b removed an attachment of type application/octet-stream which
had a name of twmideas.html]
> ---------------------------------------------------------------------
> To unsubscribe, mail [EMAIL PROTECTED] with the line:
> 'unsubscribe vnc-list' in the message BODY
> See also: http://www.uk.research.att.com/vnc/intouch.html
> ---------------------------------------------------------------------
---------------------------------------------------------------------
To unsubscribe, mail [EMAIL PROTECTED] with the line:
'unsubscribe vnc-list' in the message BODY
See also: http://www.uk.research.att.com/vnc/intouch.html
---------------------------------------------------------------------
---------------------------------------------------------------------
To unsubscribe, mail [EMAIL PROTECTED] with the line:
'unsubscribe vnc-list' in the message BODY
See also: http://www.uk.research.att.com/vnc/intouch.html
---------------------------------------------------------------------
