Virus/Worm Alert! W32.Klez.A@mm in high distribution!

Question

Virus/Worm Alert! W32.Klez.A@mm in high distribution!

Answer

This question was answered on October 26, 2001. Much of the information contained herein may have changed since posting.

Another mass-mailing worm known as W32.Klez.A@mm is spreading quickly.

The worm exploits a vulnerability in Microsoft Outlook and Outlook Express by executing itself when you open or even preview an infected message.

The email will arrive with the following characteristics:

Subject: (The subject of the email varies).

Attachment: (The attachment has a random file name).

Body Message:

I'm sorry to do so,but it's helpless to say sorry.

I want a good job,I must support my parents.

Now you have seen my technical capabilities.

How much my year-salary now? NO more than $5,500.

What do you think of this fact?

Don't call my names,I have no hostility.

Can you help me?

This message may not be visible on older e-mail programs that are not able to display HTML messages.

The current versions of most anti-virus programs can detect and remove this virus, so be sure to update if you have not done so in the last couple of weeks.

Users of Outlook and Outlook Express should consider turning off the 'preview pane' so that this new generation of worm/virus code can not auto launch when you click on a message.

To turn off the preview pane in Outlook Express, make sure you are in your Inbox then click on View/Layout and remove the checkmark from the 'Show preview pane' box.

To turn off the preview pane in Outlook, click on View/Preview Pane.

More information and a patch for the vulnerability can be found at <a href="http://www.microsoft.com/technet/security/bulletin/MS01-020.asp" target="_blank"><font color="#003399">>http://www.microsoft.com/technet/security/bulletin/MS01-020.asp</b></font></a>.

Author

Posted by Ken of Data Doctors on October 26, 2001