[MWForum]do NOT open the "special new web site" attachment

Wendy Petti mwforum@lists.mathcats.com
Mon, 10 Mar 2003 10:12:58 -0500


Hi Folks,

Do NOT open or read the "special new web site" message or attachment
which came to MWForum this morning.  Just delete it.  A virus is
attached.  It pretends to be "ini.bat" but it is really the
W32.Klez.H@mm virus.  That virus always picks a random fake return
address from addresses found on the computer of the sender.  In this
case it randomly picked my e-mail address from someone's computer.  I
assure you I did not send it and my computer is not infected.  But it
appears that the computer of *someone* on this list is infected, for the
virus attachment message was sent to a random address found on that
computer - and that address happened to be our MWForum.  The message got
through because the virus happened to pick a return address from a
member of the group (me).  If it had picked a non-member's address from
that user's computer, then the message would have been intercepted and
not posted since it would have come from a non-member.

I do hope that all of you have good anti-virus protection; it's
critical.  I am well-protected, thank goodness, for my e-mail accounts
intercept at least a dozen virus attachments every day.  (My e-mail
address is included in the cache of Temporary Internet Files on the
computer of everyone who visits my site, so I really get bombarded with
virus attachments.)  Most of them are the rampant W32.Klez.H@mm virus.
If you do NOT have anti-virus protection, then please visit one of the
antivirus sites to learn how to check your computer for this virus and
eliminate it, and how to protect your computer from re-infection in the
future.  Such sites would include:

http://www.symantec.com
http://www.mcafee.com

Some viruses can be activated simply by previewing a message without
even opening the virus attachment itself, so if you do not have
antivirus protection, there is a chance your computer got infected this
morning if you opened the message even if you ignored the attachment.
Please take precautions to make sure your computer is virus-free.

So sorry for the annoyance, but I do assure you that in spite of
appearances (the fake return address) the virus message was not sent
from my computer!

Wendy Petti
MWForum moderator