Re: W32.Elkern removal tools

["Irfan Khan" <khania@super.net.pk>]

dear all,

on 6 May 2002, a message appeared on the s-asia-list with subject 
line saying "W32.Elkern removal tools" and the From field having my 
email address: 


> Subject: W32.Elkern removal tools 
> From: "KhanIA" <KhanIA@super.net.pk> 
> Date: Mon, 6 May 2002 14:40:02 +0800 (CST) 


please note that I did _not_ send this message (as can be seen from 
the header), rather it was sent by a computer, which is connected to 
udngroup.com.tw and is infected with W32.Klez.E@mm (or one of its 
variants). 

it seems that the attachment contains a URL. please do not open, 
execute or click on the attachment. it is recommended to delete this 
message from your inbox/folder. my apologies for any inconvenience.

irfan

PS: from the website of Symantec, the publisher of Norton Antivirus: 
"It has been reported that W32.Klez.E@mm may arrive in the following 
email promoting a Symantec removal tool. Symantec will never send 
unsolicited email and the attachment should be deleted."
source:  
http://securityresponse.symantec.com/avcenter/venc/data/w32.klez.e@mm.
html