tcells
|
posted on May 9, 2002 08:04:19 AM
Hi All,
received an end of auction notice from ebay this morning that was quarantined by my virus program. I can't open the notice to read it because of the quarantine, all I can view is the following notice:
Subject: Worm Klez.E immunity
THE HTML CODE IN THIS MESSAGE MAY CONTAIN A VIRUS, THEREFORE IT IS NOT SAFE TO DISPLAY. YOU MAY WISH TO CONTACT THE SENDER AND NOTIFY THEM OF THE INFECTION.
I admit I'm not very computer savvy when it comes to a virus, and I really don't understand what it means.
Any one else have this happen?
|
dadofstickboy
|
posted on May 9, 2002 08:22:35 AM
This is one of the worst bug's out right now!
Delete it!
Your virus program told you all you need to know.
Do what it say's!
|
DeSquirrel
|
posted on May 9, 2002 08:24:24 AM
The Klez worm is rampant. It replicates itself by grabbing a document or file on your computer at random and sending it to people in your address book. That's how you got it. The actual file is meaningless. You should tell the sender they have the worm. The symantec web site has a removal procedure if they don't have an antivirus program.
|
tcells
|
posted on May 9, 2002 09:00:01 AM
thanks- it didn't make it to my computer thanks to my virus programs. The scary part is that it came from ebay. Anyone know who I should notify at ebay?
[ edited by tcells on May 9, 2002 09:01 AM ]
|
sulyn1950
|
posted on May 9, 2002 09:06:40 AM
"You should tell the sender they have the worm."
I think he's asking if eBay is the sender of the virus.
I am not sure how this works, but I have been told that it can also "forge" an email to you from someone that you have received email from. It looks like it's coming from a certain person, when it's not.
I received one from PayPal. I contacted PayPal but never got a reply. Since I haven't noticed anyone else screaming about PP sending them a virus, I assume it was really NOT from PP. One of the comments in the header was "possibly forged".
I use OE and I have set it to require I click on the subject line twice to open it. When something gets past my ISP's filter (they catch most) that looks odd, strange, or from someone I don't know or haven't heard from in a long time, I right click on the address and then preview the source and details. I can also check and view the message without actually opening the email. I have Norton and have been checking updates daily since this nasty virus popped up big time a few weeks ago.
The PayPal message was caught by my ISP and it was scrubbed before they sent it to me so it didn't alert my Norton. It was the exact message you get when "you've got cash" notices are sent out. Only thing is it did not actually have my name on it, that part was left blank.
It might be worth a heads up to eBay but I have no idea how you would alert them using their "new & improved" feedback webform!
oops! typo's-if I missed any, please ignore them. 
[ edited by sulyn1950 on May 9, 2002 09:15 AM ]
|
BananaSpider
|
posted on May 9, 2002 09:16:46 AM
tcells,
If you don't mind me asking, who is your ISP?
|
tcells
|
posted on May 9, 2002 09:33:46 AM
Sulyn- you are probably correct that it was forged. As many end of auction notices that ebay sends out I can't imagine that I'd be the only one to receive it.
I've been getting as many as 5 a day of this virus from other ebayer's email addresses, tis is the first one that came as an end of auction notice. Just wondering if it was only me, or if anyone else had received one.
Thanks!
|
tcells
|
posted on May 9, 2002 09:34:22 AM
sorry, double post!
[ edited by tcells on May 9, 2002 09:36 AM ]
|
pelorus
|
posted on May 9, 2002 12:30:44 PM
Here's my post on a similar thread:
These viruses are automatically sent out in emails by the virus itself. The sender is not trying to harm you, in fact the sender has been infected and doesn't even know the emails are being sent from their account.
There has been a rash of virus emails lately because of a new type of virus (klez). In klez the recipient doesn't have to open the attachment to get infected, all that's required is to look at the email. Looking at the email header title in your email list will not release the virus.
|
NearTheSea
|
posted on May 9, 2002 12:39:19 PM
I've been getting quite a few per day, Nortons been catching them.
Now I tried to download the new upgrade THROUGH ebay for Sellers Assistant Pro, and TADA, the warning for 32klez comes up, and I cannot download it. I thought this just came through email?
[email protected]
|
docadoodle
|
posted on May 9, 2002 06:26:24 PM
sulyn is right.
The virus makes it look like it's coming from someone in the affected computers address book. What seems to be the sender is problably not. I have Norton scan all my mail and got an infected email from my daughter who uses the same computer as me amd I definitely don't have it. It turns out my father in law's computer is infected and I am getting infected mail that appears to come from those in his address book, even though they don't necessarily have the virus.
This is one nasty bug.
|
Libra63
|
posted on May 9, 2002 08:32:50 PM
You might get that message if you have your security zone set to high.
Also maybe your buyer received that notice and used that to send you an email.
I use eBays EOA notice when I send out my WBN. How I do that is I use forward, cut and paste the email address of the buyer in the to part and put my WBN before the EOA notice. Also in the subject line is the auction name and number. I have no idea why I do that but I think it's because I can cut and paste the email address and not get it wrong. Sometimes I do silly things.
|
caffeitalia
|
posted on May 9, 2002 08:59:52 PM
One thing about this virus is the size. You will find that e-mails with a size from 122k to 140k. Come to think about it, the only e-mail address of mine that I receive it is my e-mail I use for ebay. I have not received it in any other e-mail.
|
