Hi Patsy et al,

I think I'm the culprit for at least for two of the messages.  Our server
intercepted a virus and quarantined the e-mail/attachment (which i had
recieved as a histonet posting).

When I replied to a different posting later, it seems that the server sent a
notice without my reply that a file had been quarantined.

Horrified I might add, I asked my IS guys if I had inadvertantly infected
the rest of the histo-land.  They said "No".  The server sends a
notification instead of the e-mail that is suspect, hence your anti-virus
software didn't find a virus, (It's here, sitting in jail) but you did
recieve an "alert".

Other people have reported "stuff" over the last couple of weeks, so I don't
think our server is the root of the problem.

I apologize to all who were worried about the messages from our server, and
I will make sure this doesn't happen again.

Feeling very silly,

Tim

Tim Webster RAMC
Histology Specialist
Northwestern Medical Center
Fairfield Street
St Albans, VT 05478
(802) 524-1070
Twebster@nmcinc.org



-----Original Message-----
From: rueggp [mailto:rueggp@earthlink.net]
Sent: Tuesday, April 30, 2002 11:22 PM
To: HistoNet Server; John McGinley
Subject: virus notice


is anyone else getting these messages that a virus was detected in a
email they sent?

Message #1
Recipient of the infected attachment:  Anita Westbrook\Inbox
Subject of the message:  A  WinXP patch
One or more attachments were quarantined.
  Attachment Re_ Ziehl-Neelsen [ZN] (2).scr was Quarantined for the
following reasons:
    Virus W32.Klez.gen@mm was found.

Message #2
From:
        ANTIGEN_HUEY 
     To:
        "'rueggp@earthlink.net'" 


Antigen for Exchange found README.exe infected with W32/Klez.G@mm
(Norman)
worm.
The message is currently Purged.  The message, "Congratulations", was
sent from rueggp  and was discovered in IMC Queues\Inbound
located at Northwestern Medical Center/KERBS/HUEY.

Message #3
From:
        ANTIGEN_HUEY 
     To:
        "'rueggp@earthlink.net'" 

Antigen for Exchange found Unknown infected with HTML.MimeExploit
(CA(Vet))
virus.
The file is currently Removed.  The message, "Congratulations", was
sent from rueggp  and was discovered in IMC Queues\Inbound
located at Northwestern Medical Center/KERBS/HUEY.

Message #4
From:
        brendabegg 
     To:
        rueggp@earthlink.net

Klez.E is the most common world-wide spreading worm.It's very dangerous
by corrupting your files.
Because of its very smart stealth and anti-anti-virus technic,most
common AV software can't detect or clean it.
We developed this free immunity tool to defeat the malicious virus.
You only need to run this tool once,and then Klez will never come into
your PC.
NOTE: Because this tool acts as a fake Klez to fool the real worm,some
AV monitor maybe cry when you run it.
If so,Ignore the warning,and select 'continue'.
If you have any question,please mail to me.

WHAT SHOULD I DO?  I RAN MCAFEE VIRUS SCAN AND IT DID NOT DETECT ANY
INFECTION.

Patsy