I have received the W32.Klez virus (it has other variants of the name) with
the header "Darling" as well as many other headers about 3 dozen times in
the past week and a half.  Some messages had it as an auto-open file that
did not show up as an attachment, some of the messages had an attachment
that was the virus.  Norton has caught it every time.  Symantec has a fix
you can download from www.symantec.com.  I have sent messages to everyone I
received it from, many of whom claim that they do not have the virus on
their machines.  Nonetheless, I have received it multiple times from some of
the same people who say they do not have it so if it is possible to change
the "sender" in a message it looks like this virus does it.  It is an
annoying virus but not all that destructive.  You can read more about it at
the symantec site.

Elizabeth Moore

Dr. Elizabeth A. Moore
Curator of Collections and Archaeology
Virginia Museum of Natural History
1001 Douglas Avenue
Martinsville, VA  24112


----- Original Message -----
From: "Eugene Dillenburg" <[log in to unmask]>
To: <[log in to unmask]>
Sent: Wednesday, May 01, 2002 2:55 PM
Subject: Virus spotted -- "darling"


> Got a message today from another Museum-L user, who had received
> a virus attached to an e-mail with the header "Darling."  I checked with
> our computer department, and they say this is the work of a virus
> called [log in to unmask]
>
> Our computer folks swear my machine is clean.  It seems this bug, on
> another computer, is sending out messages under assumed names.
> Since the point of contact between me and this other user is
> Museum-L, I thought I should let you all know this bug is lurking out
> there.
>
> So, just to be safe, we should:
>
> * delete any e-mails with the subject line "Darling"
> * never open attachments from unknown or unexpected sources
> * keep our virus protection up-to-date.  (You might check with your
> security provider for cures for this particular bug)
>
> -- Eugene Dillenburg
>
> =========================================================
> Important Subscriber Information:
>
> The Museum-L FAQ file is located at
http://www.finalchapter.com/museum-l-faq/ . You may obtain detailed
information about the listserv commands by sending a one line e-mail message
to [log in to unmask] . The body of the message should read "help"
(without the quotes).
>
> If you decide to leave Museum-L, please send a one line e-mail message to
[log in to unmask] . The body of the message should read "Signoff
Museum-L" (without the quotes).
>
>

=========================================================
Important Subscriber Information:

The Museum-L FAQ file is located at http://www.finalchapter.com/museum-l-faq/ . You may obtain detailed information about the listserv commands by sending a one line e-mail message to [log in to unmask] . The body of the message should read "help" (without the quotes).

If you decide to leave Museum-L, please send a one line e-mail message to [log in to unmask] . The body of the message should read "Signoff Museum-L" (without the quotes).