Colonial Campaigns Club (CCC)

I got hit with 3 worm e-mails today from masked senders. KLEZ_H WORM on two and a link that set an auto download of comet and Gator spyware programs.
Two had the usual "meeting scheduled" or "hello, again" subject tags, but one had a tactical tag. This leads me to believe the source is one of my war gaming friends

Corporal Sam Moon Ferguson's Amer. Volunteers

Sam, go to http://www.symantec.com/avcenter/venc/data/w32.klez.removal.tool.html and you can DL this file that will remove this virus. Even if you are NOT infected and survived any attempt to infect, it never hurts to be safe.

<b><font color=gold>Ernie Sands
Col, 3rd East Kent,CCC
President, Colonial Camp Club
Col,1 Konig,VIII,AdR
LtGen,CO XXIII Corps AoO
Sch,183Inf,VIII,PzC
Pvt B Co, 3/3-MBC </b></font id=gold>

Thanks Ernie, I caught these before I clicked on the attachments and have isolated the sender and notified him. I also scanned my system to make sure I was clean and ran a KLEZ_H remover from Trnd Micro to be sure. Dang pain though. I had 3 different mailings from this sender over the course of 8 hours, each with a different false sender as the postee, each with different attachments and viruses, and each with a different approach. The worst was from addressed from "postmaster of my isp. with a note that my message had been returned and the subjest was tactical. Checking the properties, I found this mesage never originated from my ISP nor was it a return of a message I had sent. Enclosed were two different files with the virus.
I did get caught by one of these e-mails. Instead of a virus, it connected me with a site that loaded programs called Comet Cursor and Gator on my PC. These companies are adware companies and cleaning the system of them was a worse pain. The adware programs are not considered virus programs but IMO they are just as much of a problem.

Corporal Sam Moon Ferguson's Amer. Volunteers

To fight back on GATOR and COMET CURSOR (AND any other ad type program), look into the FREE or paid versions of this AD-Aware, which is the best program to remove those from your system:
http://www.lavasoft.nu/index.html

<b><font color=gold>Ernie Sands
Col, 3rd East Kent,CCC
President, Colonial Camp Club
Col,1 Konig,VIII,AdR
LtGen,CO XXIII Corps AoO
Sch,183Inf,VIII,PzC
Pvt B Co, 3/3-MBC </b></font id=gold>