VAIRESH opened this issue on May 02, 2002 ยท 21 posts
Hiram posted Thu, 02 May 2002 at 11:13 AM
Many of you have been receiving emails with the virus WORM_KLEZ.H or variant attached. Our virus scanner has detected this virus and removed it. This worm can change or spoof the original email address in the FROM: field. It obtains the email addresses that it places in the FROM: field from the infected user's address book. This causes a non-infected user to appear as the person who has sent this worm's malicious email. It does this to hide the real sender of the infected email. (from ) This is significant for 2 reasons: You may be alerted that you have sent a virus to someone, when in actuality it may be from someone else who has you in their address book. You may wish to alert the sender that they are sending you viruses but it may not be from them. In the first case: Alert IT about the email. It is unlikely that it came from you but we want to be sure it didnt please forward a copy of the virus warning to us by using the IT staff email group and we will investigate further. In the second case: Please respond to the sender that you think they may have sent you a virus. You may also wish to direct them to two different tools that can be used to remove the virus and will also test their computer to see if they are infected (or simply forward this email to them). This first tool is from Trend Micro . This link will take you to information about the virus and a link to the Fix tool is listed in the Automatic Removal section. You will need WinZip to extract and use this tool. Nortons removal tool: This is probably the easiest to use. When you get to this page click on the click here to obtain the tool link to download the tool. Also, be sure to check your home computer for this virus, you wont know you are infected unless someone responds to a virus that you have sent them. Update your virus scanner and run a manual scan or visit to do a free online scan. This tool should not be used as a substitute for a full time virus scanner as it only scans your computer when you visit this site and manually run it. Trend Micro also sells a home version of their software which I prefer over Norton or McAfee which is called Pc-cillin.