[ale] Building the better virus email.... [Fwd: W32.Klez.E removal tools]

[John Wells]

Got this from another list I'm on...

I've always been amazed at the stupid stuff people fall for when being
infected by virii (i.e., "Here is that document you asked for ... don't
show anyone else ;-)").

Thought this one was a bit more intelligent.  I'd understand Joe User
falling for this one, if it weren't for the broken English ;-).

John

-------- Original Message --------

Return-Path: <rabatcti at iam.net.ma>
Delivered-To: jb at coastal.homelinux.org
Received: from logic.phpwebhosting.com (logic.phpwebhosting.com
[66.33.1.213])
     by coastal.homelinux.org (Postfix) with SMTP id 7AB85143990
     for <jb at coastal.homelinux.org>; Thu, 26 Sep 2002 06:45:41 -0400 (EDT)
Received: (qmail 17826 invoked by uid 457); 26 Sep 2002 10:47:56 -0000
Delivered-To: sourceillustrated.com-jb at sourceillustrated.com
Received: (qmail 17818 invoked by uid 508); 26 Sep 2002 10:47:54 -0000
Received: from unknown (HELO Stimpy.netroedge.com) (206.228.191.3)
     by logic.phpwebhosting.com with SMTP; 26 Sep 2002 10:47:54 -0000
Received: from smtp-send.iam.net.ma (smtp-send.iam.net.ma [212.217.54.144])
     by Stimpy.netroedge.com (8.11.1/8.11.1) with ESMTP id g8QAq7610434
     for <sensors at stimpy.netroedge.com>; Thu, 26 Sep 2002 03:52:07 -0700
Received: from Ecqvj ([62.251.233.172])
     by smtp-send.iam.net.ma (8.11.6+Sun/8.11.6) with SMTP id g8Q7kje16841
     for <sensors at stimpy.netroedge.com>; Thu, 26 Sep 2002 10:46:45 +0300
(EET DST)
Date: Thu, 26 Sep 2002 10:46:45 +0300 (EET DST)
Message-Id: <200209260746.g8Q7kje16841 at smtp-send.iam.net.ma>
From: borlandfr <borlandfr at borland.com>
To: ale at ale.org
To: sensors at stimpy.netroedge.com
Subject: W32.Klez.E removal tools
MIME-Version: 1.0
Content-Type: multipart/alternative;
     boundary=Rk97BjYFsuM3g1c2TH52y1dMrb

Subject: W32.Klez.E removal tools
From: borlandfr <borlandfr at borland.com>
To: ale at ale.org
Date: Thu, September 26, 2002 3:46 am
To: sensors at stimpy.netroedge.com



F-Secure give you the very W32.Klez.E removal tools
W32.Klez.E is a very  dangerous virus that spread through email.

For more information,please visit http://www.F-Secure.com



 untitled-2


 untitled-4

---
This message has been sent through the ALE general discussion list.
See http://www.ale.org/mailing-lists.shtml for more info. Problems should be 
sent to listmaster at ale dot org.