[PRCo] Re: YOU MAY HAVE A PROBLEM

[Kenneth Josephson]

Hi John,

I have the latest McAffee virus scan and firewall and keep it updated.
My system is clean.

We determined that the Kletz worm had gotten into somebody's address
book and it pulls addresses so that when it resends itself, it uses the
address of somebody else's e-mail to make it hard to trace.

My program has been trapping up to two infected attachments per day, all
from "railfan" addresses since early July. The most prolific addresses
seem to be "dmyers" and "sierrarail", though I've received infected
files with both Fred the Third's and Ed Lybarger's e-mail addresses. My
McAffee program has quarantined every infected attachment. It can't,
however, stop the virus from pulling my address from other people's
address books and using it as the "from" address.

Thanks for letting me know. I hope your program stopped the worm in its
tracks.

K.