NASTY VIRUS TODAY - W32.Klez.E@mm

Brangwen · March 15th, 2002, 12:14 PM

Dear All:

This morning while down loading my email, my Norton Anti-Virus Alarm picked up a virus called: W32.Klez.E @ mm.

This is only the second time in 14 years I've caught a virus. I found this virus at: http://securityresponse.symantec.com...klez.e@mm.html

Apparently, the virus may have been dormant for awhile, and is programmed to open or execute on odd numbered months, e.g., March.

If you click on the link, instructions are provided for removing this virus from computers with varying operating systems, e.g., Windows 98, WinME, Win2000, etc.

It's a lengthy process ... but the damage can be nasty, though Symantec Security (Norton Anti-Virus) lists it as "moderate." This virus has been upgraded from a level 2 to a level 3 during January or March of this year. All the information is at the end of the above link.

Most importantly, do not open emails with untrustworthy attachments at least until you've read the above "How to Remove" article.

Good luck.

Brangwen

osprey4 · March 15th, 2002, 12:31 PM

Quote:

Most importantly, do not open emails with untrustworthy attachments...

I thought this was the prime directive for avoiding viruses. What were you doing that permitted this virus to get onto your system?

John

FreakyOCR · March 15th, 2002, 01:05 PM

The prime directive?? It seems everybody is wayy to curious about what the attachment is that they wave the risk factor... and boy do they regret it after the damage is done.

Myb rother thought somebody sent him a love letter... yep... Trashed his entire computer....

Brangwen · March 15th, 2002, 01:18 PM

John & FreakyOCR:

John wrote:

Quote:

I thought this was the prime directive for avoiding viruses. What were you doing that permitted this virus to get onto your system?

John

I did not click on anything to open an attachment ... As the email was downloading, I scrolled up to begin reading the first arrival and as the email containing the virus was passed over the virus alert activated.

FreakyOCR wrote:

Quote:

The prime directive?? It seems everybody is wayy to curious about what the attachment is that they wave the risk factor... and boy do they regret it after the damage is done.

storm2k · March 15th, 2002, 01:47 PM

well the good thing is that his virus scanner caught it and cleaned it. this is why i run both zone alarm pro and norton's with email scanning on, aside from being a cautious email opener.

MDdan · March 15th, 2002, 02:09 PM

I just cleaned that virus off my neighbor's computer. If you read the writeup on it, it actually infects your computer WITHOUT clicking on the attachment.

*whoa* just blew away a set in stone rule there right?

Well, sorta. The problem is that Outlook is so helpful that it "clicks" on it for ya. All you have to do is preview the message, or pull up the text. Outlook executes a script in the email that then launches the virus.

Summary: All you have to do is use outlook to get nailed, you don't have to click on the attachment.

Now, if we want to blame Brangwen for infecting his computer, here's how we can do it.

There has been a patch out for over a year that fixed this vulnerability in IE and Outlook.

Sorry Brangwen, couldn't get you off the hook altogether.

Moral of the story: Don't use Outlook, or at least keep it patched if you do.

Brangwen · March 15th, 2002, 02:19 PM

MDdan:

Good point!

I thought I had downloaded & installed those patches awhile ago.

I will certainly double check or just duplicate the DL / Install.

Thx.

Brangwen

MDdan · March 15th, 2002, 02:27 PM

Here is the safest way to patch outlook:

Go to control panel
Choose "Add/remove Software"
Unistall Outlook

Go to www.netscape.com and download netscape.

Configure Netscape Mail.

If you take a look at all the grief that Outlook has caused, it's amazing it's still so popular.

Of course, I use it from time to time too.

osprey4 · March 15th, 2002, 02:30 PM

Brangwen, thanks for your story. Guess I can't plead ignorant any more.

I try to keep up with security updates but the bad guys always seem to be one step ahead. MDDan's point well taken.

John

Emc2 · March 15th, 2002, 02:39 PM

I've never used Outlook as my mailing program and never will. It wass very unimpressive to me when I was looking for a mail program a few years back. 90% of the viruses that teachers get here on campus are written for IE's and Outlook's vulnerabilities. We've recently gone to Eudora and IE6, and alot of our problems see to have become aleviated.