Baren Digest                Monday, 13 May 2002        Volume 19 : Number 1827


----------------------------------------------------------------------

From: Cucamongie@aol.com
Date: Sun, 12 May 2002 14:15:53 EDT
Subject: [Baren 18040] virus stuff 



Hi all, I hope that this turns out to be an unnecessary email, but better 
safe than sorry.  Somehow an email that appeared to be from me which had an 
infected file attached to it went to someone in my address book
yesterday.  
If you get an email that appears to be from me with an attachment, please 
don't open that file.
I checked my computer at home for viruses, and it's not infected.  I will 
check my computer at work tomorrow, but apparently this worm w32.klez.h@mm 
can send out messages that appear to be from an infected computer but are 
actually being sent from a third party.  
You can see more info on this virus at 
http://www.symantec.com/avcenter/venc/data/pf/w32.klez.h@mm.html
sorry if this has created problems for anybody
best wishes
SH



------------------------------

From: Gerald Lange <Bieler@worldnet.att.net>
Date: Sun, 12 May 2002 12:28:16 +0000
Subject: [Baren 18041] Re: Unavoidable 'off-topic' virus information ... 


> 
> From: Myron Turner <mturner@Ms.UManitoba.CA>
> Date: Sun, 12 May 2002 07:19:47 -0500
> Subject: [Baren 18038] Re: Unavoidable 'off-topic' virus information ...
> 
> Since this worm uses an attachment, wouldn't that exclude baren as a
> source?  That is, I thought that baren members can't attach files to their
> postings.  So, if something comes in your email ostensibly from baren and
> it has an attachment, then isn't it suspect?  In other words, does the worm
> fill in the "From" field with the baren list's address?
> 
> Myron


Myron

My understanding is that Klez can hide in HTML code as well as in a variety of
attachments. Since a lot of folks continue to allow "enhanced text" (HTML) as
their brower's email formating, it is quite possibly being transmitted in this
manner. Klex does alter or substitute in the send to/sent from of an email.
The infected mail message may not be coming from the list at all.

Gerald

------------------------------

From: "Philip Smith" <SmithArt@Pacifier.com>
Date: Sun, 12 May 2002 22:13:47 -0700
Subject: [Baren 18042] Builders!!!! 


Here's a guy who has some plans for sale on building an etching press for
yourself,...if you are interested.
Some of you have mentioned looking for a cheap press to buy.
I have a feeling that a lot of this press could be converted to wood. Anyway
here's his address. Have a look-see.
WWW.dougforsythegallery.com

Good luck,

Philip
Hammond, OR


------------------------------

End of Baren Digest V19 #1827
*****************************