Re: Virus Warning

["Tesla list" <tesla-at-pupman-dot-com>]

Original poster: "Darin Willson by way of Terry Fritz <twftesla-at-qwest-dot-net>" <darinwil-at-wmtonline-dot-com>

On a side note, I work for an ISP and deal with this virus often, if 
someone could send
me the header from the message I can track it down.

Please follow the step by step instructions below for obtaining E-mail 
header information.
Open the e-mail by double-clicking on it.
Outlook Express 4.x and up
--------------------------
1. Open the message. Choose File from the pull-down menu bar.
2. Select Properties. Another window will open showing two tabs.
3. You will want to choose the selection titled Details.
4. Copy and paste the header into a new message.
Netscape 4.x and up
-------------------
1. Choose View from the pull-down menu bar.
2. Click on Headers and select All.
3. Copy and paste the header into a new message.
Outlook 2000
------------
1. Open the message
2. Choose View -> Options from the menu bar.
3. Copy and paste the information in the Internet Headers section into a 
new message.
Eudora 3.x and up
-----------------
1. Open the message.
2. Under the title bar are option buttons. One will say BlahBlahBlah.
3. Click on that and all headers will be shown.
4. Copy and paste the header into a new message.
Hotmail
-------
1. Click Options to the right of the Address Book tab. The Options page 
will appears.
2. Under Additional Options, click the Mail Display Settings link. The Mail 
Display Settings page appears.
3. Under Message Headers, select Full and click OK.
4. Copy and paste the header into a new message.
MSN Explorer
------------
1. Open the message and then click More in the upper right corner.
2. Click Message Source. The message opens in a new window with all the 
header information visible.
3. Copy all the text and paste it into a new message.

Thanks,
Darin Willson
http://wmtonline-dot-com
On Thu, 26 Dec 2002 19:12:19 -0700, Tesla list <tesla-at-pupman-dot-com> wrote:

>Original poster: "S Gaeta by way of Terry Fritz <twftesla-at-qwest-dot-net>" 
><sgtporky-at-prodigy-dot-net>
>
>
>Hi all,
>
>Someone on this list is infected with <mailto:W32.Klez.H-at-mm>W32.Klez.H-at-mm (See
>
><http://securityresponse.symantec-dot-com/avcenter/venc/data/w32.klez.h-at-mm.html>http://securityresponse.symantec-dot-com/avcenter/venc/data/w32.klez.h-at-mm.html 
>
>
>
>for details)
>Clicking on the above link will take you to a Symantec site where you can
>learn everything about this worm and download the cure.
>
>Every day for the past week or so, I keep getting an email with this virus
>attached to it. Norton always catches it. Up until yesterday, it always came
>from an address that I didn't recognize. Yesterday, it was from Weazle -
>VE3EAR. Don't panic Weazle, you are not the one who sent me the email. The
>virus fakes the sender by randomly selecting an email address from the
>infected computers address book, and puts that in the "from" line. This
>makes it difficult to track down who is infected.
>Since it picked someone from this list, I can finally narrow it down to this
>circle of friends. I have seen one other callsign that I didn't recognize in
>the "from" line. Sorry, I didn't take note of it. It was someone from "3
>land" here in the states.
>
>Good luck. I hope that other people can also provide feedback, and can help
>to track this thing down. Does anyone have my email address, VE3EAR and
>"mck" (Today's Klez was disguised to come from him) in their address book ?
>If you do, get the inoculation from the above link.
>
>On a happier note: Happy New Year everyone!
>
>Sue
>
>



-- 
Darin Willson