Alfa Pages

Ian M · Posted: Sun Jun 08, 2003 7:21 pm Post subject: Virus!!!

I keep getting emails containing an attachment which my virus checker calls malware.
Not sure what that is but luckily my checker deals with it.
As it keeps coming I was wondering if it may be coming from this sight or someone using it (not accusing anyone it can happen without ones knowledge).
The email address of the sender is jamie@tokenboy.fsnet...cant remember the last bit as I have deleted everything related to it and lost the bit of paper it was written on.
Does anyone recognise this??
It has been arriving in my inbox nearly every day just lately,the virus is called VirusW32/klez.H@mm

Ian M · Posted: Sun Jun 08, 2003 7:25 pm Post subject: Virus!!!

I have now found a description of it...
General characteristics
Type: Worm
Alias: W32.Klez.G
Spreading mechanism: Email, network, file infection
Email characteristics:
Subject: Variable
Body:
Variable
Attachment: Variable
Destructivity: Low
Payload: Removes antivirus programs
Detected by virus detection files published: 17 Apr 2002
Virus characteristics first published: 17 Apr 2002 14:58 (CET)
Virus characteristics latest update: 27 Feb 2003 12:41 (CET

Gary UK · Posted: Sun Jun 08, 2003 8:01 pm Post subject:

Alot of virus' spread by reading html files in the ..\Windows\Temporary Internet Files\ folder and looking for e-mail addresses so if your e-mail is on this forum and an infected computer has viewed a page with your address on it will try to propagate itself to your address.

When I ran the for sale section on the old site the amount of virus e-mails I recieved was large to say the least.

Just keep your anti virus software up to date and apply all OS/Browser patches as soon as they are released.

Alot of recent virus' have been pretty(VERY actually) soft on the damage front but if someone decides to use many of the known exploits with some particulary nasty code you might end up with a formatted C: drive. Basically keep your software updated twice weekly.

Also to keep spam to a minimum use a disposable adress for this type of forum and keep your personal adress for friends and family ONLY.

Scott Sander · Posted: Mon Jun 09, 2003 1:01 am Post subject:

As far as I'm aware trying to find out where Klez came from is almost impossible, as it picks up different parts of the email address. So the email address it supposedly came from may not be correct.

All you can really do is keep up to date with your virus scanner definitions and don't open anything that looks a bit suss.

I go to www.sophos.com and enter parts of the subject into their search engine and see if it gets reported against a virus.
_________________
Scott Sander
'91 Alfa 33 Boxer 16V Monza - Awesome
http://www.sanderfamily.com

Ian M · Posted: Mon Jun 09, 2003 9:46 am Post subject:

I have downloaded and run the fix for this worm and luckily it had not infected my puter.
I do keep up to date with antivirus stuff which is why I caught it.
I would like to know where it came from though.
It came twice yesterday.