W32.klez.gen@mm driving me NUTS!

[MadDoctor]

The old guy down the street sends me an email and my system quarantines it and then reports to me that he has the W32.klez.gen@mm virus. I drop by his house and run the klez removal tool (http://securityresponse.symantec.com/avcenter/venc/data/w32.klez.removal.tool.html) (ME, safe mode, system restore off). Crank the machine backup, run AVG and comes out clean. Go to PC Pitstop and run the online test on his machine (20 minutes) and it also comes up clean.

This morning he sends me another message and there it is again. My system quarantines the message and says he’s got the same bug.

Help.... Anyone?

[TonyT]

The emails are NOT coming from him!

The nature of that virus is that it copies email adresses and records them. Next person that gets the virus has email sent that apears to come from some other known email address.

I get em all the time from Spain lately and the "from field" is spoofed by the virus.


Read up re this virus: http://www.symantec.com/avcenter/venc/data/w32.klez.h@mm.html

"Email:
This worm searches the Windows address book, the ICQ database, and local files for email addresses. The worm sends an email message to these addresses with itself as an attachment. The worm contains its own SMTP engine and attempts to guess at available SMTP servers. For example, if the worm encounters the address user@abc123.com it will attempt to send email via the server smtp.abc123.com.

The subject line, message bodies, and attachment file names are random. The From address is randomly-chosen from email addresses that the worm finds on the infected computer."

[blebs]

Tonys da man! MD, it sucks, but that's how it works. It's not your buddy, but your buddy's hijacked address is being used.

[MadDoctor]

Thanks TonyT. I feel a LOT better now (even though it sucks for the old guy).

blebs99: Think I should buy Tony a beer or two? I think so.

:)

[blebs]

Sure why not, just don't let him work on his truck, on a slope, while drinking those beers! :p

[TonyT]

ahem.......beer or two? (insulting)

case of Bass Ale would be nice!

FYI, I moved. The sloped driveway is now all stones. Ouch!@#!@#

[blebs]

I forgot about that! Stones might actually be worse. :)

Be sure to have Doc pay up! :D

[MadDoctor]

You say we should get stoned? Better yet! :D

That being the case... maybe I'll give myself a virus.


:rotfl:

[denolth2]

http://www.newscientist.com/news/news.jsp?id=ns99992252

dentsu

[Ashdaw]

I get this in My Emails ALL the time. It is a Bloody pain and I am sick of it. My Dad has had two so far and I get them like Clockwork. :(

I have NAV2002 and It finds them ALL the time but SHEESH, bloody annoying. I also have BC wipe which I use after EACH one to remove from the HDD. I wipe the HDD about once a month to get rid of wasted space and Empty mu Recycle bin with the BC wipe programme.

I hope these guys get the equivalent of Computer Cancer and cry as their toys go down. :(