[831] in winnt
more W32/Klex.eml e-mails :(
daemon@ATHENA.MIT.EDU (Huxley, Bil)
Thu May 2 08:22:14 2002
Message-Id: <5.0.2.1.2.20020502080234.03026fe8@po9.mit.edu>
Date: Thu, 02 May 2002 08:22:48 -0400
To: security-fyi@mit.edu, mitvirus@mitvma.mit.edu
From: "Huxley, Bil" <huxley@MIT.EDU>
Cc: itpartners@mit.edu, winpartners@mit.edu
Mime-Version: 1.0
Content-Type: text/plain; charset="us-ascii"; format=flowed
Good Morning,
Around midnight last night two more W32/Klez.eml e-mails were sent to MIT
mailing lists (that I'm on - perhaps more...). One with a subject of
"Byte.careercast.com" was sent to itpartners at 12:04:25 and one with a
subject of "Honey" was sent to winpartners at 12:07:03. Both times are
from the receipt at MIT in the e-mail headers.
These both appear to have been received via Tether (18.162.2.177). Might
it be possible to contact to Tether User and see if they have an infected
machine that they were not aware of?
Please let me know if there's any way I might help eradicate this worm from
our community.
FYI,
Bil
