HANKS-L Archives

Archiver > HANKS > 2002-09 > 1032572798


From: "Renee O." <>
Subject: [HANKS] Everyone, please scan your computer to be sure you don't have the Klez virus
Date: Fri, 20 Sep 2002 21:46:38 -0400
References: <4d.2459a57c.2abc0ec8@aol.com> <003801c260bc$8bde1220$dcfea8c0@Default> <001d01c26110$13ec00c0$0101a8c0@agape>


Hi everyone,

Since joining this list, I have received more and more emails with the Klez
virus and emails saying I've sent the virus. I know that Klez works by
using an email address it finds on someone else's computer and makes it look
as though it is from that person. I know I do not have the Klez virus. I
have the most current version of Norton Anti Virus and update my virus
definitions daily. Norton catches this virus every time and I quarantine
it. I ran a full scan yesterday and do not have the virus.

The reason for this email is twofold.

1. If you are receiving emails saying that I sent them, with the Klez virus,
I can assure I do not have the virus and the message is not really coming
from me.

2. To ask everyone on this list to be sure you have virus scanning software
on your computer and update your virus definitions if it has been awhile
since you have done it.

If you don't have an antivirus program, here are a few places you can
download a free program to get rid of Klez on your computer, if you have it.
These programs will scan your computer for Klez and if it doesn't find it,
it won't do anything, but if you do, it will try to remove it.

http://www.onlinepcfix.com/virushelp/antivirus.htm

http://securityresponse.symantec.com/avcenter/venc/data/w32.klez.removal.too
l.html

http://downloads.zdnet.co.uk/downloads/detail/1002-2239-10104613.html

If you want to find more, just type in Klez removal in your internet search
bar. You will find many places to get this.

Next step is to be sure you have an antivirus program on your computer.
Klez is a dangerous virus and it is spreading rapidly.

I got about 15 messages today alone infected with Klez. Most of them are
saying 'returned mail:' which is a common spoof that Klez uses. It looks
like you are sending email that you are not. I am also getting about 5
messages a day from servers saying that I am sending this virus. Yesterday
I got at least as many.

I am fairly certain that it is someone on this list that has the virus. I
am on one more email list, in fact I run that one, so I will send an email
to that one too.

Each and every one of the emails is from cinci.rr.com, so if your email ends
with this, then you may be the one with the virus. I am going to learn more
about how to read the headers to see how to find out where it is really
coming from. If I do find out, I will let the person know privately.

Some of the emails say they are coming from Hanks-L-Request, but I am sure
they are not, because Rootsweb has made it very clear that their servers are
setup to not allow attachments and they have antivirus programs on their
server. I haven't received any that appear to be from my other list, which
also leads me to believe that someone on this list has the virus. It is
hard to know if you don't scan your system if you have it or not until your
computer doesn't work right anymore, because Klez will likely never show
that the email is coming from the person who is infected, so they won't know
they are sending infected emails. The best protection is to scan all email
with an anti-virus program. If you have an older version of Outlook or
Outlook Express and haven't updated with the latest security patches, all
you have to do is preview the email, you don't even have to open the
attachment, to get the virus. Previewing is when you see who the email is
from and the subject and a few other things on top and when you click on the
message once, you can see it in the bottom window. So also be sure you
download the latest security patches for Outlook and Outlook Express if you
haven't done that in the last few months.

Please do scan your systems as soon as possible! If you are already using
an Anti Virus program and your virus definitions are up to date, and you
have protection on your email, you already know that you are ok. This
message is for those who don't use anti virus protection or who install it
and think it will protect them without updating it at least weekly or who
don't have email protection on.

Thanks,

Renee


This thread: