APNIC Home APNIC Home


[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

FW: Klez virus confusion




FYI- see the note below about the virus confusion.

Please note that the virus attachment which appeared to have been sent by
me, was not sent by me. I may have also been infected by this virus that
sent it out. I have since scanned my computer to clean everything up. Sorry
for the confusion and thanks for those who warned me about it.

Best Regards,
LAina
-----Original Message-----
From: Pacific Internet [mailto:announce@pacific.net.sg]
Sent: Friday, February 22, 2002 5:31 PM
To: Subscribers
Subject: Klez virus confusion



Dear Customer,

    There has been a growing trend in the spread of an email virus
    called Klez which has caused confusion among Internet users. This
    email is to clarify the situation.

    ---------------------------------------------------------------------
    Virus Name:         W32/Klez.e@MM

    Detailed information available at:
        http://vil.mcafee.com/dispVirus.asp?virus_k=99367&;

http://www.antivirus.com/vinfo/virusencyclo/default5.asp?VName=WORM_KLEZ.E&V
Sect=T

    The  W32/Klez virus has the ability to spoof(impersonate) the
    "email from" field in emails.  The sender's address used by the
    virus is one that was found on the infected user's computer.

    This virus causes confusion as it may appear that you have
    received this virus from one person, when it was actually sent
    from a different user's computer.  Viewing the entire email header
    will display the actual sender's IP address.

    To prevent infection on your own computer:
        - Users are advised not to open emails of unknown origin
        - Ensure their anti-virus solutions are up-to-date
        - Keep their computer operating systems up-to-date
    ---------------------------------------------------------------------

    You may encounter confusion in the following situations:

    1. Someone claims that you sent them a virus infected email and
       you have checked that your computer is clean from virus.

       Possible Explanation:
        A third party was infected, and your email address was forged
        by the virus to further propagate itself.


    2. You receive an infected email from someone but he claims his
       computer is clean from virus.

       Possible Explanation:
        That person's email address was forged by the virus from
        another party's computer.


    The source of the email will not be clear and we advise users to
    send in the complete email (with headers) to abuse@pacific.net.sg
    for investigations or you may call our Technical Support at
    6336-6622.  We will assist to contact the source of the email and
    advise them to dis-infect their computer.

    We seek your understanding and patience in this matter as the
    other party may not respond immediately to our request.


Information Security Department
Pacific Internet
----------------------------------------------------------------------
NOTE: In no event will Pacific Internet Limited be liable for any
business interruption, lost revenue, profits or data, or for damages
of any kind, however caused, arising out of your use of or inability
to use the information contained in this advisory, or your failure to
receive any prior or future alerts, watches or warnings, even if
Pacific Internet Limited has been advised of the possibility of such
damages.

* APPLe: To unsubscribe, send "unsubscribe" to apple-request@apnic.net *