SCOUG-HELP Mailing List Archives

<< Previous Message << >> Next Message >>

Date:	Tue, 30 Apr 2002 09:32:06 PST7
From:	"Steven Levine" <steve53@earthlink.net >
Reply-To:	scoug-help@scoug.com
To:	scoug-help@scoug.com
Subject:	SCOUG-Help: Re: sendmail hack/relay attempt

=====================================================
If you are responding to someone asking for help who
may not be a member of this list, be sure to use the
REPLY TO ALL feature of your email program.
=====================================================

In <20020430095137.8614.cpmta@c009.snv.cp.net>, on 04/30/02
at 01:51 AM, said:

>wonder if it might have any relation to:

>http://www.acm.org/technews/articles/2002-4/0429m.html#item12

I don't think it's related, but Klez must be pretty nasty out in the WinXX
world. It's been showing up here daily with correct To: addresses. That
means that WinXX users with my name in their address book have been
infected.

It appears that Klez might have had a relatively large window of
opportunity. When it first showed up here, Symantec did not detect it
with the available signatures. It was at least a day until working
signatures appeared.

Steven

--
---------------------------------------------------------------------
"Steven Levine" MR2/ICE 2.31a #10183 Warp4/FP15/14.085_W4
www.scoug.com irc.webbnet.org #scoug (Wed 7pm PST)
---------------------------------------------------------------------

=====================================================

To unsubscribe from this list, send an email message
to "steward@scoug.com". In the body of the message,
put the command "unsubscribe scoug-help".

For problems, contact the list owner at
"rollin@scoug.com".

=====================================================

Return to [ 30 | April | 2002 ]

SCOUG, Warp Expo West, and Warpfest are trademarks of the Southern California OS/2 User Group. OS/2, Workplace Shell, and IBM are registered trademarks of International Business Machines Corporation. All other trademarks remain the property of their respective owners.