[Dshield] Klez

Bob Savage bsavage at rnr-inc.com
Tue Jun 25 20:20:19 GMT 2002


I'm looking at one just like that right now.  Apparently came from
Portland Oregon, says it's from one local user to another.  I'm trying
to understand why our anti-virus software doesn't catch them.  It's
InoculateIT, which up until now seems to have been pretty reliable.

-----Original Message-----
From: Paul Marsh [mailto:pmarsh at nmefdn.org]
Sent: Tuesday, June 25, 2002 2:00 PM
To: 'Dshield (E-mail)
Subject: [Dshield] Klez



I just want to take a quick poll, is everyone/anyone else still seeing
Klez attachments?  Some days I see a few maybe 5 or so but today I've
received about 30 of them.  It's just getting annoying, is there anyway
to truly locate the infected machine?   I just love it when an
attachment comes in saying it's from one of my users to another one of
my users and the attachment is infected.

Thanx, Paul  

-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://www.dshield.org/pipermail/list/attachments/20020625/dcea1505/attachment.htm


More information about the list mailing list