Virus that uses random subject:?
Page 1 of 2 12 LastLast
Results 1 to 10 of 19

Thread: Virus that uses random subject:?

  1. #1
    Member
    Join Date
    Feb 2002
    Posts
    87

    Post Virus that uses random subject:?

    I had a call from a client a couple of days ago that has a laptop that may be infected with a virus. The first clue is that an email is being sent from her email account to all of her coworkers, my first thought was the Klez virus, but the weird thing is that the subject line in each email is different and has a subject that has been used on existing emails fromher company. I have been researching this through all AV sources that I can think of with no luck and just wanted to see if anyone has seen or heard of a virus that would do this. Let me know, thanks.

    ccKid

  2. #2
    Senior Member
    Join Date
    Feb 2002
    Posts
    1,210
    the W32.Klez worm can generate a random subject..
    http://securityresponse.symantec.com...ez.gen@mm.html

    in your search did you try google ? just entering in your subject line yielded 46,400 hits
    http://www.google.com/search?hl=en&i...=Google+Search

  3. #3
    Originally posted here by sumdumguy
    the W32.Klez worm can generate a random subject..
    http://securityresponse.symantec.com...ez.gen@mm.html

    in your search did you try google ? just entering in your subject line yielded 46,400 hits
    http://www.google.com/search?hl=en&i...=Google+Search
    It's most likely Klez....go to http://housecall.antivirus.com and scan the box with that

  4. #4
    Member
    Join Date
    Feb 2002
    Posts
    87
    I checked out the stats on Klez and it didn't match up with a known attribute of the virus. The first link that you gave me Sum, said nothing about the virus taking ~~~subjects~~~ from emails that had been ~~~received"~~~ ~~~previously~~~ with no problem.

    ccKid

  5. #5
    Senior Member
    Join Date
    Apr 2002
    Posts
    380
    The klez virus has many variants. I get tons of email with random subject all the time... The only good protection in my mind would be to block any email with an executable attachment... Most firewalls have such an option...
    [shadow]Scorp666, the Infamous Orgasmatron[/shadow]

  6. #6
    TechieChick
    Guest
    Sounds like Klez.G to me.

  7. #7
    Member
    Join Date
    Feb 2002
    Posts
    87
    I will check further into the different variants of Klez. I appreciate the information.

    ccKid

  8. #8
    Member
    Join Date
    Feb 2002
    Posts
    87
    Okay, one last point. The emails had "subjects:" that were from previous emails that the client had received from co-workers but the "new" emails body messages were completely different. They do not neccessarily have random subjects but it is pulling subjects from emails that were received. Still Klez? I'm not sure yet.

    ccKid

  9. #9
    Member
    Join Date
    Feb 2002
    Posts
    87
    I should also mention that the emails that the subjects are being pulled from were received several months ago.

    ccKid

  10. #10
    Member
    Join Date
    Feb 2002
    Posts
    87
    Okay, I found some more detailed information on all the known variations of Klez and some have random subjects but they are all created from a list in the virus itself not from previously received emails.

    ccKid

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •