From: Dave Mayer (dave.mayer@southwest-consulting.com)
Date: Fri Aug 30 2002 - 18:11:04 CDT
Just my $.02 Bahamian (I'm heading there next week and there is no exchange
rate with the US <grin>, my all-time favorite virus scanner is McAfee
Online. About $30/year and you can scan all accessible drives (i.e.
network) from one computer. The best feature is that it prompts very
regularly for updates from their site.
<> Happy Trails, Dave <>
Chairman - SGVC High Adventure Training Team
ASM - Troop 131 - Pasadena, CA
I usta be a buffalo...
-----Original Message-----
From: Greg Leuch [mailto:philmont@adventures.port5.com]
Sent: Friday, August 30, 2002 3:43 PM
To: Multiple recipients of list philmont
Subject: Re: [Philmont]: PC infected with KLEZ?
A couple months back, I was getting virus infected emails from
philptc@cimarron.springercoop.com. This was a while back thought.
But the serverpath from comcast.mi.com is not ciamrron.springercoop.com. And
a traceroute on 68.40.196.35 shows it from Middletown, NJ? Anyone on the
list from that area might want to check their computer then.
You can goto
http://www.sarc.com/avcenter/venc/data/w32.klez.removal.tool.html if you
feel that you have the KLEZ virus on your computer. Free download that scans
and will fix if that vrus is found on your computer.
Just offering my help.... don't be alarmed!
Greg Leuch
Crew 35 - Memphis, TN - Chickasaw Council
Eagle Scout - 2001
PSR: 727-P1-00; 618-G1-01; Staff in '03?
email: philmont@adventures.port5.com
aim/aol: philmontRedneck -or- Backpacker005
site: http://www.xipia.org (down for data center relocation)
"you know, art is the reason why i get up in the morning. but my definition
ends there. you know it doesn't seem fair that i am living for something i
can't even define..." -ani difracno
----- Original Message -----
From: "Selden E Ball Jr" <SEB@LNS62.LNS.CORNELL.EDU>
To: "Multiple recipients of list philmont" <philmont@troop47.com>
Sent: Friday, August 30, 2002 4:40 PM
Subject: [Philmont]: PC infected with KLEZ?
> Gentle PhilPholk,
>
> I'm sorry to have to bother all of you, but...
>
> If you live in Michigan and use COMCAST as your Internet provider,
> *please* get a copy of a current Anti-Virus product, update its
> virus signatures to the most recent version and use it to scan
> your PC's hard drives for viruses. That'd be a good idea even
> if you don't live there :-)
>
> Over the past few weeks I've received several messages from
> some PhilPhan's PC that are infected with the KLEZ virus.
> I've already contacted the people who I know live in Michigan,
> but their systems seem to be clean.
>
> Since the KLEZ virus forges the return address and other information
> in the message header, it's rather difficult to determine what system
> these messages actually are coming from. However, since I suspect
> that others may be receiving similar messages, I thought it would
> be best to warn you all of this problem.
>
> The header of the most recent such message (received just a few minutes
> ago) included this line:
>
> > Received: from Nccgx (bgp934461bgs.brmngh01.mi.comcast.net
[68.40.196.35])
> > by mtaout04.icomcast.net
> > (iPlanet Messaging Server 5.1 HotFix 0.8 (built May 13 2002))
> > with SMTP id <0H1O002XZEQPNC@mtaout04.icomcast.net> for
> > seb@lns62.lns.cornell.edu; Fri, 30 Aug 2002 17:37:47 -0400 (EDT)
>
> The gibberish PC name (Nccgx) is one of the symptoms of KLEZ,
> but the IP name and address (bgp934461bgs.brmngh01.mi.comcast.net
> [68.40.196.35]) were valid at 17:37:47, when the message was accepted by
> the mail server mtaout04.icomcast.net.
>
> The forged "From" address is
> > From: philptc <philptc@cimarron.springercoop.com>
> which means that the infected system has that address in
> a file somewhere on the disk where KLEZ could find it, possibly
> in an "address book".
>
> Thanks for your help in this matter.
>
> Selden
> ======
> Selden E. Ball, Jr.
>
> Cornell University Voice: +1-607-255-0688
> Laboratory for Elementary-Particle Physics FAX: +1-607-255-8062
> LT105 R. R. Wilson Laboratory
http://www.lns.cornell.edu/~seb/
> Dryden Road Internet: SEB@LNS.CORNELL.EDU
> Ithaca, NY, USA 14853-8001 HEPnet/SPAN: LNS62::SEB = 44284::SEB
>
>
>
>
>
> -------------------------------------------------------
> Scouting E-mail Discussion Lists @ usscouts.org
> Subscribe/Unsubscribe at http://usscouts.org/lists/
> Listserv Commands at http://usscouts.org/lists/lc.asp
> -------------------------------------------------------
> Send listserv commands to: listserv@troop47.com
> Send postings to: philmont@troop47.com
> List FAQ found at: http://usscouts.org/lists/faq.asp
> List Administrator: philmont_owner@troop47.com
> -------------------------------------------------------
> As you gather around this virtual campfire with fellow
> Scouts and Scouters, do your best to be trustworthy,
> loyal, helpful, friendly, courteous, kind, obedient,
> cheerful, thrifty, brave, clean and reverent.
> -------------------------------------------------------
>
>
>
>
>
>
>
>
-------------------------------------------------------
Scouting E-mail Discussion Lists @ usscouts.org
Subscribe/Unsubscribe at http://usscouts.org/lists/
Listserv Commands at http://usscouts.org/lists/lc.asp
-------------------------------------------------------
Send listserv commands to: listserv@troop47.com
Send postings to: philmont@troop47.com
List FAQ found at: http://usscouts.org/lists/faq.asp
List Administrator: philmont_owner@troop47.com
-------------------------------------------------------
As you gather around this virtual campfire with fellow
Scouts and Scouters, do your best to be trustworthy,
loyal, helpful, friendly, courteous, kind, obedient,
cheerful, thrifty, brave, clean and reverent.
-------------------------------------------------------
-------------------------------------------------------
Scouting E-mail Discussion Lists @ usscouts.org
Subscribe/Unsubscribe at http://usscouts.org/lists/
Listserv Commands at http://usscouts.org/lists/lc.asp
-------------------------------------------------------
Send listserv commands to: listserv@troop47.com
Send postings to: philmont@troop47.com
List FAQ found at: http://usscouts.org/lists/faq.asp
List Administrator: philmont_owner@troop47.com
-------------------------------------------------------
As you gather around this virtual campfire with fellow
Scouts and Scouters, do your best to be trustworthy,
loyal, helpful, friendly, courteous, kind, obedient,
cheerful, thrifty, brave, clean and reverent.
-------------------------------------------------------
This archive was generated by hypermail 2.1.7 : Thu Mar 13 2003 - 10:37:27 CST