Paul L

Has anyone picked this up? I received it by e-mail once from NCRS and several times also in the two weeks or so. I wonder if some spam agency is picking up e-mail addresses from here at the Forum. Norton quarantines it but it is annoying.

Smokehouse69

Yeah Paul, I got it a couple of different times last year, once from another forum member. It took me several mailings to him to convince him that he actually had a CTD. :D Norton handles it well, but you are right it is a PITA.

ram82fire

My norton has isolated 28 infected items over the last 4 weeks . I think it is a pretty common occurence anymore . And a bit annoying !

Geo :iagree:

74Coupe

Every other day I get a e-mail from some :U
McAfee also pops up a warning and I just delete it.
A real PITA.

Paul L

I guess that I am not alone....

PatsLs1vette

ive gotten almost 50 so far in 3 days,and i keep getting returned mail with the virus.

Eddie 70

I just recently changed email addys. This has stopped alot of the junk email I was getting. So far so good with the new email addy.

67HEAVEN

Klez doesn't come from whom it says it does. It chooses another entry from the infected computer's address book and says that's where it came from.

Very clever......very devious.......very difficult to backtrack. :mad

Paul L

There is a free removal tool.
http://securityresponse.symantec.com...oval.tool.html

madmaxgt

Please do not take "KLEZ" lightly! It's a pain in the A-- and it will keep your virus protection software from working and prevents most other maintenence action on your computer. The best cure is to down load the free "stinger setup" removal tool from McAfee! It works stand alone to remove 16 specific worms (trojans) I am pretty sure you can get it here! http://www.mcafee.com/anti-virus/virus_removal/klez.asp


[Modified by madmaxgt, 10:06 PM 12/21/2002]

Titanium Rat

just keep me off all your mailing lists please :lol: :lol: :lol:

Tyler Townsley

Once you get it it sends your ISP address to the web and keeps coming back until you change your ISP. I finally gave up and installed a firewall that protects from the port attacks that this virii actually uses once it has gotten on your computer and broadcasted your address. It actually disables earlier versions of Norton and is a MAJOR PIA. It uses both email and port attacks once you have it.

I can log on using my wifes ISP and not get hit, but if I use my own ISP it takes about 3 min and Norton (2003) catches an incomming attack (And not using an email message).

Tyler

PatsLs1vette

if anybody recieves email from me disreguard it ,i checked for virus and i dont have anyshowing up but forum members are recieveing email from my address that im not sending out,so sorry for any inconvience,people have nothing else better to do. :mad

QuickVet

why dont you guys just not open any email with attachments even from friends, unless you are expecting one? :confused:

QuickVet

Pat it very well not be your computer that is infected. Read on:

Email spoofing
Some variants of this worm use a technique known as "spoofing." If so, the worm randomly selects an address that it finds on an infected computer. It uses this address as the "From" address that it uses when it performs its mass-mailing routine. Numerous cases have been reported in which users of uninfected computers received complaints that they sent an infected message to someone else.

For example, Linda Anderson is using a computer that is infected with W32.Klez.E@mm; Linda is not using an antivirus program or does not have current virus definitions. When W32.Klez.gen@mm performs its emailing routine, it finds the email address of Harold Logan. It inserts Harold's email address into the "From" portion of an infected message that it then sends to Janet Bishop. Janet then contacts Harold and complains that he sent her an infected message, but when Harold scans his computer, Norton AntiVirus does not find anything--as would be expected--because his computer is not infected.

If you are using a current version of Norton AntiVirus and you have the most recent virus definitions, and a full system scan with Norton AntiVirus set to scan all files does not find anything, you can be confident that your computer is not infected with this worm.

PatsLs1vette

aaron thanks,im on cable and my mcafee virus scan and firewall updates every time im on so i know its up to date,ive scanned and scanned and its not there so i feel better now thanks.