Message Areas - "NALW - PLEASE READ THIS"

Train-Sim.Com Message Areas

"NALW - PLEASE READ THIS"

Email this topic to a friend
Printer-friendly version of this topic
Bookmark this topic (Registered users only)
Previous Topic | Next Topic Conferences MSTS Locomotive Design (Protected) Original message
v1perfan (238 posts)
May-27-02, 03:05 PM (EDT) "NALW - PLEASE READ THIS" Hey Guys,Who on NALW has the address NALW@COX.RR.COM or jjkling@worldnet.att.net? One of these two email addresses is sending mail from an infected computer.I am periodically receiving a message with the title "Not as fast with" that contains a virus. Fortunately, my virus scanner catches it before it does any real damage.I've received this message a few times already. I thought it had been cleared up, but I guess not.Just a head's up to whoever owns that email address - update your virus signatures and do a scan!Brian.BTW: here's the path properties I collected from the email message:Return-Path: <jjkling@worldnet.att.net>
Delivered-To: v1perfan@cogeco.ca
Received: from mtiwmhc21.worldnet.att.net (mtiwmhc21.worldnet.att.net <204.127.131.46>)
by fep9.cogeco.net (Postfix) with ESMTP id E331157E9
for <v1perfan@cogeco.ca>; Fri, 10 May 2002 09:37:09 -0400 (EDT)
Received: from Vwf (<12.72.145.114>) by mtiwmhc21.worldnet.att.net
(InterMail vM.4.01.03.27 201-229-121-127-20010626) with SMTP
id <20020510133644.IEJX24238.mtiwmhc21.worldnet.att.net@Vwf>
for <v1perfan@cogeco.ca>; Fri, 10 May 2002 13:36:44 +0000
From: NALW <NALW@COX.RR.COM>
To: v1perfan@cogeco.ca
Subject: Not as fast as with
MIME-Version: 1.0
Content-Type: multipart/alternative;
boundary=C72LKa7PFV8VY
Message-Id: <20020510133644.IEJX24238.mtiwmhc21.worldnet.att.net@Vwf>
Date: Fri, 10 May 2002 13:37:09 +0000
Alert Edit | Reply | Reply With Quote | Top
Table of Contents

Subject Author Message Date ID RE: NALW - PLEASE READ THIS plainsman May-27-02 1 RE: NALW - PLEASE READ THIS darkfyre May-27-02 2 RE: NALW - PLEASE READ THIS TrirailF40PHL May-27-02 3 RE: NALW - PLEASE READ THIS darkfyre May-27-02 4 RE: NALW - PLEASE READ THIS chucksc May-27-02 5

Lobby | Topics | Previous Topic | Next Topic
Messages in this topic
plainsman (1007 posts)
May-27-02, 04:47 PM (EDT) 1. "RE: NALW - PLEASE READ THIS" LAST EDITED ON May-27-02 AT 04:51 PM (EDT)I think this is a recent virus variant which sends a hoax source for the malevalent code. This makes it more difficult to trace the originator. W32/Klez.e@MM is one of these types.
Bob Remove | Alert Edit | Reply | Reply With Quote | Top
darkfyre (299 posts)
May-27-02, 05:18 PM (EDT) 2. "RE: NALW - PLEASE READ THIS" Sounds about right, that's exactly what klez does...to remove it, you need to download a special utility available at Norton's website, http://www.symantec.com .. and get a security patch available at Microsoft's Product Updates page
-Darkfyre Remove | Alert Edit | Reply | Reply With Quote | Top
TrirailF40PHL (776 posts)
May-27-02, 06:46 PM (EDT) 3. "RE: NALW - PLEASE READ THIS" You know, I know I uploaded a file to the NALW Batcave when I had Klez...Chuck said it did not do any harm on his side....I'm worried it did.Kurt Remove | Alert Edit | Reply | Reply With Quote | Top
darkfyre (299 posts)
May-27-02, 06:52 PM (EDT) 4. "RE: NALW - PLEASE READ THIS" LAST EDITED ON May-27-02 AT 06:56 PM (EDT)hmm, i wouldn't worry, think it only spreads through email; but it wouldn't hurt to have someone scan the file you uploaded as far as i can recall, all Klez does is spread, crash Norton every now and then, and multiply, eating up RAM and network resources..don't really think it does any lasting damage unless it's carrying a 'piggyback' virus, which essentially makes it two viruses in one. If the Batcave has incoming-file virus scanning, then i think you're all set..if not, then if there's no way to upload or download by email, you're fine..chuck says there's no virus, chances are; there's no virus

-Darkfyre Remove | Alert Edit | Reply | Reply With Quote | Top
chucksc (1612 posts)
May-27-02, 06:55 PM (EDT) 5. "RE: NALW - PLEASE READ THIS" Its obviously spoofing an e-mail address...
NALW@COX.RR.COM is defunct and has been for some time....
If I had to guess I would think the other address is legitimate and it may have gotten our old e-mail address from his address book!
Your files scan clean dude! I checked....------Chuck Schneider---------

-----"Power for You"-------
http://nalw.macfall.com Remove | Alert Edit | Reply | Reply With Quote | Top

Lock | Archive | Remove

Lobby | Topics | Previous Topic | Next Topic