Many of you may have received a message from "Visitors" with a subject line
in German: Weitere Informationen finden Sie
DO NOT OPEN THE ATTACHMENT. IT IS A VIRUS.
"Visitors," it turns out, is a Chamber of Commerce site --
mansfieldtourism.org -- at Mansfield, Ohio where the Runoffs are held. Not
an address I really want to block. But I have received this from them four
times now -- twice to my "real" address, and twice to an address that
forwards to me from the MiDiv website -- the only place that address exists.
Likely they do not know they sent it, but obviously it has gone to a lot of
SCCA addresses. If you have any connection with SCCA club racing and it is
remotely possible the Mansfield Chamber knows about you, you may get it.
Or you may get it from another SCCA source. My next download of e-mail had
it again, but this time from a different sender (involved with SCCA Solo II
in Kansas City) and with a different subject name.
The virus is W32.klez.gen@mm. I am not sure the Virus killers know this one
yet. The Symantec website http://securityresponse.symantec.com/ names two
other W32.klez viruses on its main page, but not the "gen" virus. There is,
however, a W32.klez removal tool on that page (but I don't know if it works
on "gen").
There is no text in the body (but the one I got from KC was to a Yahoo
mailing list, so it had a Yahoo sig ad only). Just the deadly attachment.
If you have a virus scanner, update it. My last update was a month ago and
did not catch this (but my suspicious nature did). As soon as I updated
today, it snagged them right away.
--Rocky Entriken
/// unsubscribe/change address requests to majordomo@autox.team.net or try
/// http://www.team.net/mailman/listinfo
/// Partial archives at http://www.team.net/archive
|