receiving undeliverable Klez.h emails 1

[apj77]

I am receiving several emails a day from postmasters, returned mail etc. that I never sent. The emails indicate that I send an email infected with klez.h however, I never sent these emails. I am running Norton AV and when I run a scan, the system shows all clean.

I don't appear to be getting infected, but I want to stop getting these emails! Any suggestions greatly appreciated.

 

[SESaskDFC]

Howdy:

As per Norton..

This worm often uses a technique called "spoofing." When the worm performs its email routine, it can use a randomly chosen address it finds on an infected computer as the "From:" address. Numerous cases have been reported in which users of uninfected computers received complaints that they sent an infected message to someone else.

For example, Linda Anderson is using a computer infected with W32.Klez.H@mm. Linda is not using an antivirus program or does not have the current virus definitions. When W32.Klez.H@mm performs its emailing routine, it finds the email address of Harold Logan. The worm inserts Harold's email address into the "From:" portion of an infected message, which the worm then sends to Janet Bishop. Then, Janet contacts Harold and complains that he sent her an infected message, but when Harold scans his computer, Norton AntiVirus does not find anything because his computer is not infected.

If you are using a current version of Norton AntiVirus, have the most recent virus definitions, and a full system scan with Norton AntiVirus, which is set to scan all the files, does not find anything, you can be confident that your computer is not infected with this worm.



THEREFORE, until the actual infected system is found and cleaned, you and who knows how many else will be getting these emails and there is very little, if anything, you can do !!!

Murray

 

[yizhar]

HI.

Yes, I also get these messages, and only delete them.
Strange how this virus is still relevant for such a long time.

Bye
Yizhar Hurwitz

http://come.to/yizhar

http://teachers.sivan.co.il/yizhar

 

[JimInKS]

Here is a similar thread with some good info.

thread760-417580

 

[apj77]

Thanks for the feedback. It's good to know that I'm not the only one experiencing these symptoms. JimInKS, thanks for posting the link to that thread. Your reply in there is very detailed, and I am going to go through the process you outlined.

Cheers,
AJ