[HornyMolly]

What are the symptoms?

[HornyMolly]

Hi Ken, Is there any way to trace the virus to it's source? Dealing with this crap really cuts into my practising time.

I know a couple of pros who ,as a favor to me, would be happy to go over and break all ten of the pimple-headed little shit's fingers.

[kathy]

It might be worth mentioning that any of you who may have felt curious enough about Cory's photography skills to open that email message very likely have the virus now.

[Pippoles]

One recipient sent the following report: The attachment "SRC.exe" was Quarantined for the following reasons:
Virus W32.Klez.H@mm was found.

It's highly unlikely that, if a virus or worm is responsible for the unauthorized mailing to the Cellar list, it originated from Cory's computer. Only Cory is authorized to send mails to the list but it appears that an unknown third party highjacked Cory's ID, either maliciously or because they themselves were infected. In any event, steps were taken immediately to prevent this from happening again, although nothing's 100% secure. Even Yahoo got hacked a year or two ago.

There are many freeware and shareware email checkers available that allow you to see what mail you've got before you download it to your computer. (POP3 Scan Mailbox is a good one for PCs, highly recommended, and free.) Most ISPs also have email filters that automatically delete certain kinds on attachments. Contact you ISP for info.

[UriyVlasov]

Hi John,
Unfortunately, I think all you can really do if you are using Microsoft Windows, which means most people, is protect yourself with virus software, keep the definitions up to date, and whenever possible, view the "all headers" option and if you can let the person who sent it to you know, they might be able to stop it on their computer. By the way, Klez, in it's many forms, has been around for quite a while and so any up-to-date antivirus software should catch it right away.
None of this will, however, stop you from getting email from people who have it; nor will it stop people from getting infected emails which are disguised as having come from you.
Good luck and happy practicing!

[HornyMolly]

Mine was just a blank screen. Could you send it again? :-)

Seriously, I was a little puzzled at the subject header. Thanks for clearing that up.

[kathy]

Quote:

[Aniplinipsync]

Dear Cellar Mailing List,

Cory Weeds here from The Cellar. As some of you are aware,you received an
email with some explicit words and pictures in it that came from The
Cellar. We at The Cellar would like to inform you that the email was not
generated from here. My computer has a virus that has hacked our mailing
list and everyone of our 900 + on our list received this message. I would
like to extend my sincerest apologies and let everyone know that we have
someone looking into how and why this happened as we speak. We are doing our best to insure that this does not happen again. Our email list is an
important part of our business and I hope that you can all understand that
this had nothing to do with ownership or management at The Cellar
Restaurant / Jazz Club. We thank you in advance for your support and
understanding.

Cory Weeds
Owner
Chris Cottell
General Manager

[strongjannabiz]

What was the virus ID?

What antivirus software do you use?

[UriyVlasov]

In case you are not already aware,one of the characteristics of ...W32.Klez... is that it fakes the name of the sender, thus making it appear that you have a message from someone you trust. It does this by stealing contact names from the infected computer . Therefore, it is likely that the emails, supposedly coming from The Cellar, were generated elsewhere. You can confirm the return path by choosing to "view all headers" and sometimes you can see who really sent it. This can be helpful, because whoever it is might not know they are infected.
For more information, check out http://vil.nai.com/vil/content/v_99455.htm
Then go back to practising...