Hi again Netters,

I am sending this hyperlink and information from the Symantec website.  Please delete if not interested. Macintosh users are not affected either, best I can tell. (Gotta love it!)

I just received a notification from somebody's exchange server that "I" tried to send an infected file.  I forwarded it to my IT department, and they let me know that our computers/servers aren't infected.  According to Symantec:

>>Because this worm does use a randomly chosen address that it finds on an infected computer as the "From:" address, numerous cases have been reported in which users of uninfected computers receive complaints that they have sent an infected message to someone else.

For example, Linda Anderson is using a computer that is infected with W32.Klez.E@mm; Linda is not using a antivirus program or does not have current virus definitions. When W32.Klez.E@mm performs its emailing routine, it finds the email address of Harold Logan. It inserts Harold's email address into the "From:" line of an infected email that it then sends to Janet Bishop. Janet then contacts Harold and complains that he sent her infected email, but when Harold scans his computer, Norton AntiVirus does not find anything--as would be expected--because his computer is not infected.<<

If you get a message back stating you've sent an infected file, it's probably best to do a virus scan just to be sure.  But don't be surprised if you don't have it. However, some virus software sends a message back according to header information (which ours does) and not email address, and will email a message back to the infected machine.  So, best not to discount all messages, because it might be real!

Here's the website I got the info from:  http://securityresponse.symantec.com/avcenter/venc/data/w32.klez.e@mm.html

 
Best regards,

Teri Johnson
Managing Director Histology Core Facility
Stowers Institute for Medical Research
1000 E. 50th St.
Kansas City, Missouri  64110
tjj@stowers-institute.org