Forum Home
Press F1
 
Thread ID: 22338 2002-07-18 08:27:00 virus diggerdogger (1104) Press F1
Post ID Timestamp Content User
63355 2002-07-18 08:27:00 have just received (W32.Klez.H mm virus)
thankfully my defs. are up to date. also attached is ewallet.html ( 6.94kb)
the e-mail was called "new game" and came in a file called picacu.exe
( 89.6kb). firstly what does the virus actually do, 2nd. will it be sent to other people in my address book. 3rd what is the significance of "wallet"

the virus originated from ( sales@iweb.net.au ) but the return path is a friend in aussy with an address at " iweb ".

anyone with a bit of enlightenment ?
cheers
fred
diggerdogger (1104)
63356 2002-07-18 08:51:00 Hi there
Yes it will send coppies of it self to people in your address book, it also searches ICQ for e-mail addresses.
In addition to the worm attachment, the worm also may attach a random file from the computer. The file will have one of the following extensions:
mp8
.txt
.htm
.html
.wab
.asp
.doc
.rtf
.xls
.jpg
.cpp
.pas
.mpg
.mpeg
.bak
.mp3
.pdf


I found a couple of links you may want to have a read of
Symantec security Response W32.Klez.H@mm (securityresponse.symantec.com)


Hope this helps you out.

Regards
Sam
Sam H (525)
63357 2002-07-19 09:13:00 thanks sam h. downloaded the symantec fix, ran it , fortunately hasn't infected the e-mail addresses.
thanks
out
diggerdogger (1104)
1