Beware of a new worm variant of Klez called W32.Klez.H@mm!

Question

Symantec security response warns of the W32.Klez.H@mm worm. This is a level 4 worm and was found on 4-17-02!

Answer

This question was answered on May 2, 2003. Much of the information contained herein may have changed since posting.

W32.Klez.H@mm is a modified variant worm of W32.Klez.E@mm. The worm is capble of infecting files and can spread by email & network shares. This worm infects executable files and randomly chooses a file from the machine to send with it. The worm is ranked Category 4 - Severe, this is a dangerous threat and difficult to contain.

The email message has the following characteristics:

Subject, Message, & Attachment: file names are all random. The From address is also radomly chosen from the addresses available on the infected PC.

All Windows operating systems are affected.

Symantec advises all possible victims to download latest virus definitions immediately and deploy.

Get complete instruction on protection and removal from Symantec at: <a href="http://sarc.com/avcenter/venc/data/w32.klez.h@mm.html">http://sarc.com/avcenter/venc/data/w32.klez.h@mm.html</a>

Author

Posted by Michal of Data Doctors on May 2, 2003