[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
Re: [dvd-discuss] Possible worm
- To: dvd-discuss(at)cyber.law.harvard.edu
- Subject: Re: [dvd-discuss] Possible worm
- From: Wendy Seltzer <wendy(at)seltzer.com>
- Date: Mon, 13 May 2002 13:09:10 -0400 (EDT)
- In-reply-to: <5.1.0.14.2.20020510222818.0324d908@popd.ix.netcom.com>
- Reply-to: dvd-discuss(at)cyber.law.harvard.edu
- Sender: owner-dvd-discuss(at)cyber.law.harvard.edu
Yes, it appears that the Klez virus has infected someone's machine and
been sent to the list -- it was most likely not Bryan, as the virus
apparently picks a sender and recipients at random from address books on
the machines it infects. We've blocked lots from unsubscribed addresses,
but sorry this one got through.
--Wendy
On Fri, 10 May 2002, Jack Oskay wrote:
> Norton Anti Virus is reporting it as a virus after a scan.
> Type: W32.Klez.gen@mm
> Info on it
> http://www.sarc.com/avcenter/venc/data/w32.trilisa.b@mm.html
> Jack
> At 12:25 AM 5/11/2002 -0400, you wrote:
>
> >I suspect that its one of the worms going around... I run PINE, so I can't
> >confirm this.
> >
> >Anyways.. If you run outlook, you should immediately update your antivirus
> >software and scan. (This may be one of the worms that can infect even
> >without opening an attachment. Just receiving it may be enough to infect.)
> >
> >Actually, you should do that on general principals.. (Or preferably,
> >install your favorite UNIX.)
> >
> >Also, Brian may not be responsible. Some of them look in the address book
> >and pick two names, one is used as a spoofed sender name, the other
> >becomes the recipient.... So it could be *ANYONE*.
> >
> >Scott
>
>
>
--
Wendy Seltzer -- wendy@seltzer.com
Fellow, Berkman Center for Internet & Society at Harvard Law School
http://cyber.law.harvard.edu/seltzer.html
Chilling Effects: http://www.chillingeffects.org/