[Vwdiesel] OT but concerning members of the vwdiesel list

[Jim Arnott]

FWIW, backintime is probably not the orginator of the worm.  The
mechanism of the W32.Klez worm is to grab addresses out of the infected
systems address book and place them in both the to and from fields. You
can read all about it at <http://www.symantec.com>.  Just enter
"W32.Klez" in the search engine.

I run Macs, so I'm unaffected by this particular scourge.  However here
are a couple things that I've noticed:

1. message length between 120 and 160k.
2. Subject: varies.  Includes "Here is the game", "Klez virus removal
tools", "Here is the picture"
3. Apparent sender may be someone you know.  (I've received ti from my
own address.)
4. It's claimed to not be destructive until a fairly long (cybertime)
period has passed. Then it will delete files.

Jim

Brian or Pam Harrison wrote:
> Hi Dieselers;
> For the last three or four months I have been regularly receiving
> emails which have the W32.klez virus attached along with a
> randomly selected file as is the way this virus works. It seems that
> the quite a few of the messages had reply addresses of members of
> this list that I have seen posting before. Upon further investigation I
> have found that the originating address is always
> backintime at triton.net, this address seemed to be used by a Tom
> Laws who had in his email messages Lawshome which I remember
> seeing on different occasions.
> I'd like to know if anyone else has been receiving the same
> messages and if it is correct that they may be coming from the
> backintime at triton.net address? If so, does anyone know Tom
> Laws, if that is who has that address? If that is the source of the
> messages, could someone find a way to contact him or whoever
> may be using that email address and let them know that they have
> that virus. I am starting to get quite a few different photos as well as
> other files sent as attachments from their computer. I don't think that
> they are aware that this is happening so it would nice if there is
> someone on this list that could contact them, please do, so that they
> can get it fixed.
>
> Regards;
>
>
> Brian Harrison
> Stewiacke, Nova Scotia, Canada
> roseland at ns.sympatico.ca
> "VW Diesel Driver Since 1978"
> 63 Type 2
> 72 Beetle
> 85 Jetta GL td 617,000km
> 95 Passat GLS td wagon 263,000km
> 97 Jetta GL TDI 143,000km
> www3.ns.sympatico.ca/roseland
>
> _______________________________________________
> vwdiesel mailing list
> vwdiesel at vwfans.com
> http://www.audifans.com/mailman/listinfo/vwdiesel
>
> .
>