goto UNSW  home page
CONTACTS
Notices
 IT Notices forums
 Security: AL-2005.0043 [Win]
 Magellan disk corruption
 Power shutdown July 6 2005
 Magellan new disk rollout
 Newt RAID5 rollout
 Telnet and FTP service
 Mimail.D virus
 Sobig.E virus
 Newt replacement
 Bugbear worm
 W32/klez
 Nimda worm

Help
 Physics Mail
 Secure Shell
 Cygwin X11 Server
 Paper guidelines
 Helpdesk
 Request help
 Contact us

Downloads
 Software
 Account application PDF
 Useful mirrors

Network connection
 Network Access Request
 Network settings

Info exchange
 Physics e-mail lists
 School forums
 Computing forum

Documentation
 Workstation Guide HTML/PDF
 PDF Scanning
 Computing Facilities
 Workstation Software
 UN*X Security Guide
 Multimedia Facility
 CD creation quick guide
 OCR quick guide
 C Language Course Notes
 DEC F77 guide
 Proxy information

Quicklinks
 Physics IT Support
 School of Physics
 Linux links
 AARnet Mirror
 Web design
 Web statistics

W32/klez

The latest virus doing the rounds will, among other things, use e-mail addresses found in local PC files and then send fake mail with headers forged to resemble legitimate mail from addressees found in said files. The virus uses its own mail transport to send e-mail to other addressees; the e-mail contains a viral payload disguised as an attachment. People in Physics receiving such mail from other Physics staff should be advised that the mail may not have originated in Physics. Subject headers of virus generated e-mail could contain these phrases:

  • Look,my beautiful girl friend
  • How are you
  • Let's be friends
  • Darling
  • Don't drink too much
  • Your password
  • Honey
  • Some questions
  • Please try again
  • Welcome to my hometown
  • the Garden of Eden
  • introduction on ADSL
  • Meeting notice
  • Questionnaire
  • Congratulations
  • Sos!
  • japanese girl VS playboy
  • Eager to see you
  • Spice girls' vocal concert
  • Japanese lass' sexy pictures

Action

Needless to say, DO NOT OPEN ANY ATTACHMENTS contained in unsolicated mail. If you have not already done so, apply this patch that stops Microsoft Outlook and Outlook Express doing stupid things (like opening attachments without your consent):

http://www.microsoft.com/technet/security/bulletin/MS01-020.asp

Keep virus definitions current

It is advised that Windows users double-click the yellow 'C' Command Antivirus button in the Windows system tray (bottom right hand of screen) and then click the Update Now button to keep virus and macro definitions current. This update should be performed on a weekly basis, if not more frequently.

More information

  CRICOS Provider Code - 00098G Disclaimer
School of Physics - The University of New South Wales - Sydney Australia 2052
Site comments physicsweb@phys.unsw.edu.au © School of Physics UNSW