Return-Path: <nifl-health@literacy.nifl.gov> Received: from literacy (localhost [127.0.0.1]) by literacy.nifl.gov (8.10.2/8.10.2) with SMTP id g3PJnCu12119; Thu, 25 Apr 2002 15:49:12 -0400 (EDT) Date: Thu, 25 Apr 2002 15:49:12 -0400 (EDT) Message-Id: <9d.26e58823.29f9b71c@aol.com> Errors-To: listowner@literacy.nifl.gov Reply-To: nifl-health@literacy.nifl.gov Originator: nifl-health@literacy.nifl.gov Sender: nifl-health@literacy.nifl.gov Precedence: bulk From: Dwyoho@aol.com To: Multiple recipients of list <nifl-health@literacy.nifl.gov> Subject: [NIFL-HEALTH:3681] A virus warning for NIFL-Health X-Listprocessor-Version: 6.0c -- ListProcessor by Anastasios Kotsikonas X-Mailer: AOL 7.0 for Windows US sub 10503 Content-Type: multipart/alternative; boundary="part1_9d.26e58823.29f9b71c_boundary" Status: O Content-Length: 4394 Lines: 77 Content-Type: text/plain; charset="US-ASCII" Content-Transfer-Encoding: 7bit Dear Friends: I have verified the following information with NIFL. Be alert, and once again, you are advised never to open an email attachment unless you are sure who it is from. This is another reason why attachments to postings on the listserv are not allowed. I received this virus twice today on my own computer. Be especially careful if you have your computer set to automatically open the next email whenever you delete a message. What makes it appear legit is a reference to Symantec, a legitimate software company. Many thanks, Debbie > VIRUS WARNING > Formally known as W32/Klez.h@MM, the virus masquerades itself > as a free virus immunity tool. > W32/Klez.h@MM has the ability to infect computers using a known > MIME-header vulnerability in Microsoft Internet Explorer for Windows (IE > 5.01 or 5.5 without Service Pack 2.) Opening or even previewing the > message can cause infection. It also can spoof the "From:" header in > messages, thereby making the recipient think that it is coming from a > valid source. Lastly, it attempts to unload anti-virus processes on > computers with anti-virus software. > Once infected, the virus spreads by copying itself to network shares > (assuming appropriate permissions) and by E-mailing copies of itself to > addresses in the Windows Address Book. > Full details of the virus including removal instructions can be found > here: > > http://vil.mcafee.com/dispVirus.asp?virus_k=99455 > Deborah W. Yoho Executive Director, Greater Columbia Literacy Council Co-Moderator, NIFL-Health Discussion Group 921 Woodrow Street Columbia, SC 29205 803-765-2555 Fax: 803-799-8417 dwyoho@aol.com Agency email: litcola@mail.com
This archive was generated by hypermail 2b30 : Fri Jan 17 2003 - 14:41:31 EST