From: "Diana Boothe" <>
Subject: [WORLD-OBITS] PLEASE Read!!!! Very important from List Mom
Date: Fri, 3 May 2002 14:43:51 -0500
Hello Everyone!! :-)
I wanted to let everyone know that the Klez virus is running rampant. You
may already be aware of this outbreak, but I, myself, received at least 20
virus's in the last week (8 just this morning, and still counting as I write
this), all with different subject lines and attachments. That's more than I
have received this entire year, so this is a VERY SERIOUS matter. Otherwise,
we would not be discussing it on this list. <g> If anyone has questions
about this, they can reply to list mom privately at
PLEASE, DO NOT REPLY TO THIS TO THE LIST! (and don't send me any virus',
lol)
They will appear to come from anyone.....friend, foe, or mailing list
admin's. Symantec gives the following information........
"W32.Klez.gen@mm is a mass-mailing worm that searches the Windows address
book for email addresses and sends messages to all recipients that it finds.
The worm uses its own SMTP engine to send the messages.
The subject and attachment name of incoming emails is randomly chosen. The
attachment will have one of the following extensions: .bat, .exe, .pif or
.scr.
Some variants of this worm use a technique known as "spoofing." If it does
this, it chooses at random an address that it finds on an infected computer
as the "From:" address that it uses when it performs its mass-mailing
routine. Numerous cases have been reported in which users of uninfected
computers receive complaints that they have sent an infected message to
someone else.
For example, Linda Anderson is using a computer that is infected with
W32.Klez.E@mm; Linda is not using a antivirus program or does not have
current virus definitions. When W32.Klez.gen@mm performs its emailing
routine, it finds the email address of Harold Logan. It inserts Harold's
email address into the "From:" line of an infected email that it then sends
to Janet Bishop. Janet then contacts Harold and complains that he sent her
infected email, but when Harold scans his computer, Norton AntiVirus does
not find anything--as would be expected--because his computer is not
infected."
For the complete write up and ways to remove this virus, you can read the
full article here.....
http://www.symantec.com/avcenter/venc/data/ type="text/javascript">DisplayMail('mm.html','w32.klez.gen');
The most informative write-up can be found here;
http://www.viruslist.com/eng/viruslist.html?id=4292
Other write-ups can be found;
http://www.viruslist.com/eng/viruslist.html?id=4292
http://www.antivirus.com/pc-cillin/vinfo/virusencyclo/default5.asp?VName=WOR
M_KLEZ.H
http://vil.mcafee.com/dispVirus.asp?virus_k=99455
You can even do a free scan of your computer to see if you are already
infected, here...
http://housecall.antivirus.com/pc_housecall/
If you don't have anti-virus software, I would recommend that you get some
IMMEDIATELY....if you do have, then you really need to make sure that your
virus definitions are up to date. There is a very reliable program that you
can download FREE online. It can be found here.....
http://www.grisoft.com/html/us_index.htm
This Klez virus is unlike any we've ever dealt with before......it can come
to you imbedded in an email, or as an attachment, it has several names and
several variants of this same virus. So without protection, you are not
safe. If anyone needs any help with this, again, you can contact me at
Take care,
Diana
==== WORZ Mailing List ====
List Administrator for the WORZ mailing list-
Diana Boothe
==============================
To join Ancestry.com and access our 1.2 billion online genealogy records, go
to:
http://www.ancestry.com/rd/redir.asp?targetid=571&sourceid=1237