tomtomg59
03-05-2002, 02:21 PM
Hello, Everyone, just thought i should pass this along, i just got this warning in my email>>> Hello all, I just received this Virus warning from "F-Secure".
Klez.E Worm Activates Destructively Tomorrow
F-Secure is warning computer users that the Klez.E email worm will activate
destructively tomorrow, on 6th of month. Klez.E is among the ten most
common viruses wordwide.
Klez.E was originally found in January 2002. It has been getting steadily
more common over the last weeks and by now it has become one of the most
common viruses in USA, Europe and Asia.
Klez.E activates on every 6th of the month, but the activations in January
and February 2002 were causing relatively small damage. Situation is now
more serious.
Klez.E is a very complex virus. It sends itself via e-mail using a wide
variety of different messages, including messages which look like virus
warnings. Sometimes Klez fakes the e-mail sender, making it look like an
innocent bystander has been spreading the virus. Klez.E also fights against
various anti-virus products, trying to delete them.
In addition, the e-mail attachments sent by Klez can execute automatically
on some systems, causing infection by just reading or viewing an infected
e-mail message.
"Klez.E activation routine is destructive", comments Mikko Hypponen,
Manager of Anti-Virus Research at F-Secure. "It overwrites data files such
as Word DOC files, Excel XLS files, MP3 music files, website HTML contents
and ASCII text files. Even worse, it does this not only on the infected
machine but also in the local network. One infected PC with write access
can overwrite data companywide".
The Klez virus family is apparently written by a single virus writer
somewhere in Asia, as they contain texts such as "made in Asia", "Well paid
jobs are wanted", "I want a good job, I must support my parents", and "I
want a salary of $5500 a month".
F-Secure Anti-Virus detects the Klez viruses.
More information and screenshots are available at http://www.F-Secure.com/v-descs/
Klez.E Worm Activates Destructively Tomorrow
F-Secure is warning computer users that the Klez.E email worm will activate
destructively tomorrow, on 6th of month. Klez.E is among the ten most
common viruses wordwide.
Klez.E was originally found in January 2002. It has been getting steadily
more common over the last weeks and by now it has become one of the most
common viruses in USA, Europe and Asia.
Klez.E activates on every 6th of the month, but the activations in January
and February 2002 were causing relatively small damage. Situation is now
more serious.
Klez.E is a very complex virus. It sends itself via e-mail using a wide
variety of different messages, including messages which look like virus
warnings. Sometimes Klez fakes the e-mail sender, making it look like an
innocent bystander has been spreading the virus. Klez.E also fights against
various anti-virus products, trying to delete them.
In addition, the e-mail attachments sent by Klez can execute automatically
on some systems, causing infection by just reading or viewing an infected
e-mail message.
"Klez.E activation routine is destructive", comments Mikko Hypponen,
Manager of Anti-Virus Research at F-Secure. "It overwrites data files such
as Word DOC files, Excel XLS files, MP3 music files, website HTML contents
and ASCII text files. Even worse, it does this not only on the infected
machine but also in the local network. One infected PC with write access
can overwrite data companywide".
The Klez virus family is apparently written by a single virus writer
somewhere in Asia, as they contain texts such as "made in Asia", "Well paid
jobs are wanted", "I want a good job, I must support my parents", and "I
want a salary of $5500 a month".
F-Secure Anti-Virus detects the Klez viruses.
More information and screenshots are available at http://www.F-Secure.com/v-descs/