What this Klez worm does is take an e-mail address from the victim's own
address book and puts it in the "From" header (a spoof).

Mike

----- Original Message -----
From: "Robert Keezer" <warmerwagen@HOTMAIL.COM>
To: <vanagon@GERRY.VANAGON.COM>
Sent: Tuesday, May 07, 2002 4:31 PM
Subject: Re: TO LIST ADMIN

That's it - I have been inundated by e-mails from listmembers and others
with attachments. Many are phony Klez repair e-mails.
It's totally out of character for Listserv to send you an attachment. A
listmember got the virus which got into his e-mail and now it's
e-mailing us possible unbeknownst to this person .I don't have the
virus.

Robert
1982 Westfalia
1987 Wolfsburg

----- Original Message -----
Wrom: MHVIBGDADRZFS
Sent: Tuesday, May 07, 2002 12:21 PM
To: vanagon@GERRY.VANAGON.COM
Subject: TO LIST ADMIN

I received an email from LISTSERV@GERRY.VANAGON.COM at
Info@EuroCampers.com
that had a couple of attachments.

Seemed a bit strange to me.  Maybe the list admin should look into this?

Steve Lashley
SKL Enterprises Inc.
http://EuroCampers.com
636-797-9015
636-789-2127 faxGet more from the Web.  FREE MSN Explorer download :
http://explorer.msn.com