Printable View
Just to let you guys know. . . . . Someone is going around e-mailing out the KLEZ Worm again. I have recieved it 4 times in the past 3 days. Thank God for anti-virus software. The e-mails are coming from untraceable addresses. If you recieve something with a file attachment and you dont recognize the sender. . . delete it.
- Rogue
Thanx alot for sharing this info. :)
I catch KLEZ routinely at work. I'd say someone gets it somewhere in my enterprise at least every other week. It's got to be the second most common virus my AV catches right behind NIMDA. fortunately, everything has been patched for a very long time, so it doesn't do anything more than turn up in the scan.
Thank You for the warning RogueSpy. Right after i read this message some freak sent me an e-mail with it......scan...scan...scan...
....and from bugtraq mailing list -- I received this today.
---------------------------------------------------------------------------------------------
"From: Peter Snell <[email protected]>
To: [email protected]
Subject: klez variant??
Date: Thu, 30 Jan 2003 13:11:25 -0500
Over the past 2 days, we have been seeing a resurgence of Klez type
activity. However, this appears to be getting past our a/v software. The
symptoms we see are:
- spoofed email address
- unusual subject
- no body
- attachments with .scr, .bat, .exe, .jpg extensions (there may be others,
but this is what we've examined so far)
- when the email is opened, even in preview pane, it launches Media Player
but is unable to find the specified file.
Has anyone else seen this type of activity lately, or have any thoughts on
this?
Thanks,
Peter"
-----------------------------------------------------------------------------------------------