Slammed With Viruses Lately

[jared_c]

Anyone else getting slammed with viruses lately? Everyday I open Outlook and I have at least 5 e-mails that try to automatically run something when I view them. Usually attached to the e-mail is a HTML file and another file that Zone Alarm renames.

Any idea what this virus is? Has anyone else been receiving this as much as I am?

[DjM]

It's likey this one jared_c: http://[email protected]

I'v been pounded lately too.

DjM

[lkennedy.guru]

I agree with djm. Jared_c has been round the block lately. Attached is a list of the most recently released virii.

Name Date Discovered Date Updated Risk Dat Required
QDel227 04/20/2002 04/22/2002 Low 4199
W32/Klez.h@MM 04/17/2002 04/17/2002 Medium 4182
Multidropper-CX 04/17/2002 04/19/2002 Low 4198
W32/Onamu@MM 04/16/2002 04/19/2002 Low 4197
W32/Trilisa@MM 04/16/2002 04/22/2002 Low 4197
ABAP/Rivpas.intd 04/14/2002 04/15/2002 Low 4198
X97M/Reten.d 04/11/2002 04/11/2002 Low 4197
W32/MyLife.j@MM 04/11/2002 04/11/2002 Low 4197
W32/MyLife.i@MM 04/11/2002 04/11/2002 Low 4197
IRC-Smev 04/11/2002 04/12/2002 Low 4198
VBS/Chick.c@M 04/10/2002 04/11/2002 Low 4197
W32/MyLife.g@MM 04/10/2002 04/10/2002 Low 4196
W32/Pimaf@MM 04/10/2002 04/15/2002 Low 4198
W32/MyLife.h@MM 04/10/2002 04/10/2002 Low 4196
Downloader-W 04/09/2002 04/19/2002 Low 4198
W32/Dander.worm 04/09/2002 04/10/2002 Low 4197
W32/Aplore@MM 04/08/2002 04/08/2002 Low 4196
W32/Hunch.c@MM 04/06/2002 04/08/2002 Low 4196
Exploit-DebPloit 04/01/2002 04/12/2002 Low 4196
W32/MyLife.c@MM 03/31/2002 03/31/2002 Low 4195
W32/MyLife.f@MM 03/31/2002 04/02/2002 Low 4195
W32/MyLife.d@MM 03/31/2002 04/02/2002 Low 4195
W32/MyLife.e@MM 03/31/2002 04/02/2002 Low 4195
W32/Goround.worm 03/27/2002 03/27/2002 Low 4195
VBS/Chick.b@M 03/25/2002 03/26/2002 Low 4195

You can go to www.nai.com/vil to look up any virii. Hope it is helpfull.

[DjM]

Just a note: Jared_c is the name of the AO member asking the question.

Klez is the name of the Virus.

DjM

[souleman]

I have seen klez.H at least 15 to 20 times at my company in the last 3 business days.

[zigar]

Everyday I open Outlook

outlook...did you say outlook???

tsk tsk...

ah...well you're at least fully patched right?????!!!!

and yes...i've had about 20 klez sent to me since friday...


it's a master of social engineering too...cept for it's poor grammar...hehe

Subject: W32.Elkern removal tools
MIME-Version: 1.0
Content-Type: multipart/alternative;
boundary=Ss64K4m0Hma

Content-Type: text/html;

Sophos give you the very W32.Elkern removal tools
W32.Elkern is a very dangerous virus that can infect on Win98/Me/2000/XP.

For more information,please visit http://www.Sophos.com

[jared_c]

Yea.. I think that's the one. Over the past couple weeks I have been getting so many copies of this in my mailbox. It's getting annoying. I think I have received more of these than any others from the past.

I did say Outlook. Of course I am fully patched! What kind of question is that!

Thanks everyone for the replies.

[Guus]

klez? none so far.

[DjM]

Originally posted here by souleman
I have seen klez.H at least 15 to 20 times at my company in the last 3 business days.

Well yesterday, my Gateway bounced over 200. Today I'm up to 38 (and counting).


DjM

[Kindred69]

I havent had this one yet.