Subject: Quarantined email attachment warning
To: 'port-mips' <port-mips@netbsd.org>
From: NAV for Microsoft Exchange-SPAEXCH01 <NAVMSE-SPAEXCH01@msmgmt.com>
List: port-mips
Date: 06/06/2002 22:10:58
This message is in MIME format. Since your mail reader does not understand
this format, some or all of this message may not be legible.

------_=_NextPart_000_01C20DC8.9063B8F0
Content-Type: text/plain

Dear Sir or Mam,
The file attachment you sent to Byerly, Wendy\Inbox is not an authorized
file type or it contains a virus that can not be removed from the file.

If you do not understand this message, please send an email to
it@msmgmt.com.
Please do not reply to this email address.  It is not monitored or checked
at all.
Please note that currently we have noticed an increase in the detection of
the W32.KLEZ virus and a number of its variations.  Symantec Corporation has
a clean tool that has proven to be helpful to us. It may also help you.
It has an information page at:
http://securityresponse.symantec.com/avcenter/venc/data/
w32.klez.removal.tool.html
If you have not had the opportunity to read the W32.Klez Virus information,
please read this excerpt from the Symantec Web Page:

Email spoofing (Source:
http://securityresponse.symantec.com/avcenter/venc/data/w32.klez.gen@mm.html
)
Some variants of this worm use a technique known as spoofing. If so, the
worm randomly selects an address that it finds on an infected computer. It
uses this address as the From address that it uses when it performs its
mass-mailing routine. Numerous cases have been reported in which users of
uninfected computers received complaints that they sent an infected message
to someone else.

For example, Linda Anderson is using a computer that is infected with
W32.Klez.E@mm; Linda is not using an antivirus program or does not have
current virus definitions. When W32.Klez.gen@mm performs its emailing
routine, it finds the email address of Harold Logan. It inserts Harold's
email address into the From portion of an infected message that it then
sends to Janet Bishop. Janet then contacts Harold and complains that he sent
her an infected message, but when Harold scans his computer, Norton
AntiVirus does not find anything--as would be expected--because his computer
is not infected.

If you are using a current version of Norton AntiVirus and you have the most
recent virus definitions, and a full system scan with Norton AntiVirus set
to scan all files does not find anything, you can be confident that your
computer is not infected with this worm.



Sincerly,
The Information Technology Staff
Mid-South Management Company.
Crescent Media Group.

Recipient of the infected attachment:  Byerly, Wendy\Inbox
Subject of the message:  Questionnaire
One or more attachments were quarantined.
  Attachment src.exe was Quarantined for the following reasons:
    Virus UNAUTHORIZED FILE was found.

------_=_NextPart_000_01C20DC8.9063B8F0
Content-Type: application/ms-tnef
Content-Transfer-Encoding: base64
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------_=_NextPart_000_01C20DC8.9063B8F0--