Klez Virus - Tell Me How It Works

[Doc Tinker]

I've recieved two emails, in the past week, that claim they are undeliverable messages that I sent. They contained a . pif and an html link. The second one's link was to www.wwcd2.com's ezboard page. I don't remember what the first one had.



I am running AVG 6. 0 and update it weekly. AVG alerts me that the . pif file has the Klez virus, when I try to save it from my email to a folder on the hard drive. I have downloaded and run Symantec's Klez cleaning tool and it hasn't detected an infection on my machine.



Neather of the intended recipients of these emails are in my address book. I have never heard of them, but one interesting thing is that they are both hosted by Comcast, as I am too.



My question is. . Can the virus be sent to these guys from the Comcast Server and not from my computer?



I am aware that the Klez virus tries to infiltrate a network, so I'm beginning to think that the Comcast server is contaminated. Should I try to contact them and ask them to clean their system.



Another interesting thing happened to me the other day. My cable internet quit working over night, on Wednesday. On Thursday, I found out that my cable modem ID information, on the server, had been deleted. Comcast came out and delivered and new modem and set me up with a new ID. They claimed that my information was the only one lost and they thought that maybe my info was removed by accident when one of the techs was removing dead accounts. I'm wondering now if that incident was really virus related.



What do you tech guys think?



Doc

 

[DRR-24V]

Iv'e Had Three Sent To Me In A Week !

I don't know Doc. I have had the KLEZ sent to me 3 times this week and Norton catches it. I am not on a network.

 

[mdlowry]

Doc, e-mail headers can be forged. Most likely this is being sent out by someone else with your return email address.

 

[Bob Wagner]

heres the poop

http://vil.nai.com/vil/content/v_99237.htm

 

[JR2]

My parents computer was down for a couple of weeks so they could not check their email. When I checked it the other day for them they had 375 messages. Norton's killed 6 attachments to emails that had Klez in them. All sorts of different extnesions like . pif, .html,. bat..... That Klez is a persisitent one and tricky.