|
-
January 31st, 2003, 06:50 PM
#1
Warning! ! !
Just to let you guys know. . . . . Someone is going around e-mailing out the KLEZ Worm again. I have recieved it 4 times in the past 3 days. Thank God for anti-virus software. The e-mails are coming from untraceable addresses. If you recieve something with a file attachment and you dont recognize the sender. . . delete it.
- Rogue
"Never give in-never, never, never, in nothing great or small, large or petty, never give in to convictions of honor and good sense. Never yield to force; never yield to the apparently overwhelming might of the enemy!" - Winston Churchill
-
January 31st, 2003, 07:05 PM
#2
Thanx alot for sharing this info.
Ubuntu-: Means in African : "Im too dumb to use Slackware"
-
January 31st, 2003, 07:12 PM
#3
I catch KLEZ routinely at work. I'd say someone gets it somewhere in my enterprise at least every other week. It's got to be the second most common virus my AV catches right behind NIMDA. fortunately, everything has been patched for a very long time, so it doesn't do anything more than turn up in the scan.
-
January 31st, 2003, 07:17 PM
#4
Junior Member
Thank You for the warning RogueSpy. Right after i read this message some freak sent me an e-mail with it......scan...scan...scan...
[shadow]You will know the truth. And it will set you free[/shadow]
-
January 31st, 2003, 09:13 PM
#5
....and from bugtraq mailing list -- I received this today.
---------------------------------------------------------------------------------------------
"From: Peter Snell <[email protected]>
To: [email protected]
Subject: klez variant??
Date: Thu, 30 Jan 2003 13:11:25 -0500
Over the past 2 days, we have been seeing a resurgence of Klez type
activity. However, this appears to be getting past our a/v software. The
symptoms we see are:
- spoofed email address
- unusual subject
- no body
- attachments with .scr, .bat, .exe, .jpg extensions (there may be others,
but this is what we've examined so far)
- when the email is opened, even in preview pane, it launches Media Player
but is unable to find the specified file.
Has anyone else seen this type of activity lately, or have any thoughts on
this?
Thanks,
Peter"
-----------------------------------------------------------------------------------------------
Posting Permissions
- You may not post new threads
- You may not post replies
- You may not post attachments
- You may not edit your posts
-
Forum Rules
|
|