shop-talk
[Top] [All Lists]

Check for Klez (regarding npenney emails)

To: <shop-talk@autox.team.net>
Subject: Check for Klez (regarding npenney emails)
From: <Larry_Spector@NAI.com>
Date: Wed, 6 Aug 2003 11:55:12 -0700
It looks like someone out there is infected with klez (or one of it's 
variants). It's particularly nasty in that it proactively terminates many AV 
programs before they can detect/remove it. Klez can spoof email "From:" fields 
using one from your address book- so if you happen to have npenney in your 
address book it could be you!

NAI (yes, I work there) has a standalone removal tool at: 
http://vil.nai.com/vil/stinger/

Those of you on the list running Win98/Me/2000/XP might want to run this in 
addition to whatever AV product you already have, just to be sure you're clean.

BTW- the reason I suspect klez is that the subject lines we've been seeing 
match those in the virus description at: 
http://vil.nai.com/vil/content/v_99367.htm

Larry

///  unsubscribe/change address requests to majordomo@autox.team.net  or try
///  http://www.team.net/mailman/listinfo
///  Archives at http://www.team.net/archive/shop-talk


<Prev in Thread] Current Thread [Next in Thread>
  • Check for Klez (regarding npenney emails), Larry_Spector <=