Paul Taylor <>
Laurie&Leanne Knight <>
Mon, 20 May 2002 16:17:42 +1000
I believe the speciality of the klez worm is that it randomly selects two names
from an addressbook and then puts one in the "to" section and the other in the
"from" section, so that the person who receives the virus is fooled into
thinking they got it from the wrong source ...
Paul Taylor wrote:
> I've just received an email with the subject "Japanese girl VS playboy"
> that claims to be from Birding-Aus. It contains an attachment that is
> infected with the Klez worm. The email headers indicate that while the
> "From" address looks like it was from Birding-Aus, it definitely did not
> get sent by the Birding-Aus mailing list; it appears to have been sent
> from the USA.
> I'm not sure if this was sent accidentally by a member of the list who
> is infected by the worm to people in their address book, or if it was
> a deliberate attempt to "spoof" a genuine Birding-Aus email to try and
> get people to open it without checking.
> If you receive any email claiming to be from Birding-Aus that contains
> an attachment, it _may_ contain the Klez worm.
> Paul Taylor Veni, vidi, tici -
> I came, I saw, I ticked.
> Birding-Aus is on the Web at
> To unsubscribe from this mailing list, send the message
> "unsubscribe birding-aus" (no quotes, no Subject line)
Birding-Aus is on the Web at
To unsubscribe from this mailing list, send the message
"unsubscribe birding-aus" (no quotes, no Subject line)
The University of NSW School of Computer and Engineering
takes no responsibility for the contents of this archive. It is purely
a compilation of material sent by many people to the birding-aus mailing list. It has not been checked for accuracy nor its content verified in any way.
If you wish to get material removed from the archive or
have other queries about the archive e-mail
Andrew Taylor at this address: