From: Dave Ball (vought@msn.com)
Date: Thu Apr 25 2002 - 20:46:52 PDT
List Hi...
To all that have emailed me and Phil I am not sure where are how many list
members have this virus but Please go to the Norton link provided earlier in
this thread and use the clean tool twice and be sure you have the latest DAT
files in your detection software and that it is set to clean all files and
if that fails quarantine them. Run a full scan after you use the tool twice.
Since a few list members have emailed me that they got the same message I
would say that more than a few are infected. Once your equipment is cleaned
with the tool and your detection software reports no new viruses on your
equipment and you have the latest updates your system should quarantine any
further corrupt attachments or at least ask you for input.
Be careful watch what you open.
Again just friendly advice : )
Dave Ball
vought@msn.com
----- Original Message -----
From: "Phillip Lang" <plang@lanset.com>
To: "Dave Ball" <vought@msn.com>
Sent: Thursday, April 25, 2002 6:46 PM
Subject: RE: [MV] who are you!!!
> Dave,
> Have I emailed you ?
> becaues I have been getting the same thing from someone
> that I don't even know. Someone sent me a website called sophos.com
> and kaspersky.com that said that I had a virus and that it could fix
> it but I was unsure about using a website that I had no familiarity with.
>
> Have you ever heard of them ?
>
> Thanks
>
> Phill
>
>
> -----Original Message-----
> From: Military Vehicles Mailing List [mailto:mil-veh@mil-veh.org]On
> Behalf Of Dave Ball
> Sent: Thursday, April 25, 2002 5:25 PM
> To: Military Vehicles Mailing List
> Subject: Re: [MV] who are you!!!
>
>
> IHC53 Hi
>
> I received an email from you with a subject of Questionnaire and an
> attachment that was a .BAT file called ONLO. It carries a worm payload.
> There is a repair for the worm you sent out called W32.klez.gen@mm..... I
> have yesterdays DAT files from Symantec (Norton) and it can not clean this
> worm only quarantine it. You need to repair your system and clean it by
> going to this address:
>
http://securityresponse.symantec.com/avcenter/venc/data/w32.klez.gen@mm.html
> You should as a practice block files that are executable unless you know
> who they are from and even then copy them to your hard drive and scan
them.
> Your system is sending this worm please look in your address list and
remove
> me (vought@msn.com) this worm has its own SMTP system and you are
forwarding
> this worm. Also check and see if you are automatically saving addresses to
> your address book this can be a bummer for those on this list because you
> will reach out and touch everyone.
> I could send you the mail with the attachment back but that would not be
> good because you will only MAPI this everywhere because it also spreads
> through shared networks and local drives and static DSL connections.
>
> Thanks
> Also this is not meant to be anything other than a friendly warning with
> suggestive help : )
>
> Dave Ball
> vought@msn.com
>
>
>
> ----- Original Message -----
> From: IHC53
> To: Dave Ball
> Sent: Thursday, April 25, 2002 1:27 PM
> Subject: Re: who are you!!!
>
>
> Its not me, but Nortons detected it.
>
>
>
>
>
>
> ----- Original Message -----
> From: Dave Ball
> To: ihc53@bellsouth.net
> Sent: Thursday, April 25, 2002 4:35 PM
> Subject: who are you!!!
>
>
> You are sending out a worm virus!!!!!
>
>
> Dave
>
> ===Mil-Veh is a member-supported mailing list===
> To unsubscribe, send e-mail to: <mil-veh-off@mil-veh.org>
> To switch to the DIGEST mode, send e-mail to <mil-veh-digest@mil-veh.org>
> To reach a human, contact <ack@mil-veh.org>
>
>
This archive was generated by hypermail 2.1.4 : Tue May 21 2002 - 23:25:45 PDT