Virus Warning

[takaplan]

Hi-
I have been informed by one of our players that the W32.Klez.E@mm virus was unknowingly sent from a Sports Mogul email address the past week.

If you have received any unsolicited email from Sports Mogul with a strange attachment, please delete it immediately and DO NOT OPEN THE ATTACHMENT!.

Here is an example of the email:

From: "dee" <dee@sportsmogul.com>
To: <********@hotmail.com>
Sent: Thursday, July 04, 2002 10:31 AM
Subject: A WinXP patch


Hi,This is a WinXP patch
I wish you would enjoy it.

[Dee Dreslough]

One thing to know about the Klez -- it puts a random 'From' address on the emails it generates. So, even though they may SAY they're from dee@sportsmogul.com, they're not. It's just Klez covering it's tracks. My computer is clean, I tell you! Clean! Not a sniffle. :)

But, since my sportsmogul email is used as a contact point on a lot of web pages, and for certain features of this vBulletin board, Mogul players' machines who get Klez are very likely to find my email and use it. These emails are probably coming from other Mogul players, so I recommend everyone do a scan of their computers. More information on this virus is available here:
http://securityresponse.symantec.com/avcenter/venc/data/w32.klez.e@mm.html

-Dee Dreslough
From Norton:
"Because this worm does use a randomly chosen address that it finds on an infected computer as the "From:" address, numerous cases have been reported in which users of uninfected computers receive complaints that they have sent an infected message to someone else.

For example, Linda Anderson is using a computer that is infected with W32.Klez.E@mm; Linda is not using a antivirus program or does not have current virus definitions. When W32.Klez.E@mm performs its emailing routine, it finds the email address of Harold Logan. It inserts Harold's email address into the "From:" line of an infected email that it then sends to Janet Bishop. Janet then contacts Harold and complains that he sent her infected email, but when Harold scans his computer, Norton AntiVirus does not find anything--as would be expected--because his computer is not infected.

If you are using a current version of Norton AntiVirus, have the most recent virus definitions, and a full system scan with Norton AntiVirus set to scan all files does not find anything, you can be confident that your computer is not infected with this worm."