Re: MyLinks.sort() (KMM21406462V76832L0KM)
Dear Debian-Devel,
Thank you for contacting us.
=
We received an email from you with an attachment. From the looks of the
email and the attachment, it seems that whomever sent this email (not
necessarily you!) is infected with the Klez worm virus. This worm is also
called W32.Klez.H@mm. The following is a description of the worm, taken
from the following website. I very strongly advise that the entire webpage
be read to gain a full understanding of this virus:
http://www.sarc.com/avcenter/venc/data/w32.klez.h@mm.html
"W32.Klez.H@mm is a modified variant of the worm W32.Klez.E@mm. This variant
is capable of spreading by email and network shares. It is also capable of
infecting files.
"This worm searches the Windows address book, the ICQ database, and local
files for email addresses. The worm sends an email message to these
addresses with itself as an attachment. The worm contains its own SMTP
engine and attempts to guess at available SMTP servers. For example, if the
worm encounters the address user@abc123.com it will attempt to send email
via the server smtp.abc123.com.
"The subject line, message bodies, and attachment file names are random. The
>From address is randomly-chosen from email addresses that the worm finds on
the infected computer."
The only way to combat it is to contact everyone you know in your address
book, ICQ address book (if you have that), or put simply, everyone you've
ever had any sort of electronic contact with and inform them that someone
may be infected with this virus and that they should go to the following
link to fix and prevent the problem:
http://www.sarc.com/avcenter/venc/data/w32.klez.removal.tool.html
What this does, according to the site, is set up your computer to make any
incoming Klez virus program (if it gets activated) to think it's already
there. If you are infected, it will clean it out and put in the fake one.
So, while I'm writing to you about this, it is 95% likely that you're not
the infected sender - someone you know is. Please contact everyone and have
them update their virus definitions.
If you have any further questions or problems, please feel free to reply to
this email or you can find some useful information at our help site at:
http://help.earthlink.net
We have further information about Internet access through EarthLink at our customer support site:
http://support.earthlink.net
(Also accessible from the "Support" link on the top right of your Personal Start Page.)
If you need further assistance you can also contact us via chat at:
http://support.earthlink.net/chat 7 a.m. to 2:45 a.m. (EST) 7 days a week.
Gene A.
Electronic Support
EarthLink, Inc.
The #1 Provider of the Real Internet
CSR ID#: 1027
Case ID 11178463
--
To UNSUBSCRIBE, email to debian-devel-request@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmaster@lists.debian.org
Reply to: