[Towertalk] Virus

[Bill Otten]

Gentlemen and ladies.....the latest virii making the rounds are the W32-Kleg
bunch. When they infect a computer, they will propagate by 'spoofing' or
taking an address from the now infected computer's address book, and then
sending email with the virus using the 'borrowed' email address. I have
received notices from servers that said mail I supposedly sent was found to
be containing the virus. The address the server lists as receiving the mail
is someone I've NEVER heard of.....the addresses come from someone else's
address book! My address is probably in many address books.  So even if you
get this notification, it does NOT mean your system is infected.

Prudent idea would be though to run your virus scan program to check
anyway.....that part of the original posts I won't disagree with. McAfee's
Virus Scan has caught each instance of a mail-borne virus trying to make it
into my system. And it checks each that goes out. Get an anti-virus program
and keep the dat files up to date. McAfee sends automatic notifications to
users whenever a new strain is found.

Bill KC9CS

----- Original Message -----
From: "José de Sá" <ct1eeb@mail.telepac.pt>
To: <ag0n@arrl.net>; <towertalk@contesting.com>
Sent: Tuesday, April 23, 2002 4:19 pm
Subject: Re: [Towertalk] Virus


> I have got the same, actually I got them
> everyday in my mailbox.
> Norton Antivirus 2002 seems to isolate them.
>
> 73  Jose CT1EEB

>
> ----- Mensagem original -----
> De: <mcduffie@actcom.net>
> Para: <towertalk@contesting.com>
> Enviado: Terça-feira, 23 de Abril de 2002 19:36
> Assunto: [Towertalk] Virus

> >
> > Gentlemen, please check your systems!  I've received three virii today
in
> > separate mailings.  I don't have a way to confirm what group triggered
> them,
> > but two of them had ham callsign return addresses.  One was a pif, and
two
> > were scr files.
> >
> > Gary
> >
> > a g 0 n at a r r l dot n e t
> > http colon slash slash mcduffie dot ws