Klez Virus

“Has anyone else been infected with this aggravating virus?

I noticed my computer had been running slow so I tried deleting some files and running disk defragmenter. I could get it to load but it wouldn't run the program. I then tried running scan disk to see if there were errors on my drive and it wouldnt run either. I also noticed my Norton has disappeared from my task bar.

I contacted Gateway and after I ran a scan of my drive from Norton's webpage I discovered I had the Klez Virus. Finally after a week I was able to delete it off my computer!

I'm always careful with opening email and I never open attachments that I dont know what they are, but I found out with this virus it can infect the computer without opening the attachment. If the email is sent to your computer then you computer might become infected. Through a school based email account sometimes virus's get spread around because they become attached to the public address book. I do remember receiving the virus email and deleting it as soon as I saw the subject line because I knew it was a virus. However somehow it still infected my computer.

Just wanted to warn everyone to be careful and aware of this virus!”

“Sorry for the typo's! Time for me to go to bed!”

“Thanks for the notice Miss Opie. I hope I don't have that virus...sounds nasty.”

“Miss Opie is a net ho...she's always coming down with some kinda virus. That's why i always protect my floppy around her. AND NO IT"s not a 3 1/4 or a 5 1/2!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!”

“Sounds like what's happening to my parents' computer. Yikes.”

“Go to www.antivirus.com
They have a free program to scan and fix this virus.”

“Birch and I got it. It's actually klenz isn't it? We ended up reformating our hard drive it was so messed up. Keep those anti virus programs updated people! We were offline for 5 days! (the horror)”

“Sassafras I am sure there are different forms of the name. The one I had was called the klez virus.

Opie.. this virus was not my fault this time! The other two times I got viruses they were. But I do know one thing, I'm not checking my cba account from my computer anymore.”

“Untill they make a linux virus I need worry about.... ROFL!”

“Kleetn is a virus, but he will go away.”

“I always thought of kleetn as more of a parasite then a virus.”

“Well, maybe he's more of a kind of crust left over from.....hold it, this is going too far.”

“So far Mr. Norton has kept it away from me.

It keeps trying to come in through rejected email that I never sent. So now I filter all rejected email to autodelete.”

“That's why i always protect my floppy around her. AND NO IT"s not a 3 1/4 or a 5 1/2!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!"
OPIE
08:14:25 AM
06/11/02>>


Thats not what Miss Opie said”

“12 inch floppies are entirely obsolete!”

“12 inch floppies?..why would i cut off 2 inches?”

“Wow... 3 times in two days I've got email that contained a klez "worm" (w32.klex.h@mm). Since it can falsify the senders adress, it could be coming from someone here who has sent me email. Anyway, watch out and consider using that adress adventurist posted (since klez can erase key antivirus files).

I saw on the McAfee site that one version of Klez is being sent around as an anti-Klez program with instructions to "ignore any antivirus warning that your computer may make as you install this, because it works by included a 'dead' replica of a klez virus."

I've been forwarding any email that looks even remotely suspicious to a yahoo email address, since yahoo lets you scan before opening attachments.”

“Today, McAfee posted a warning that some versions of the Klez are set to start destroying computer files today (July 13th). My backpacker.com mailing address has been bombarded with klex laden emails over the past few days. Topay would be a great day to scan for virus's and to update your anti-virus, especially if you've opened any particularly large unusual email files.”

“thanks for the reminder. I was overdue.”

“We had the virus a while back, ultimately it destroyed our harddive and cost too much money over a series of repairs.”

“The klez is a scary virus because you don't even have to open the attachment to infect your computer with the virus. It can be received just by reading the body of the email.”

“have you at least conidered using a different e-mail reader? outlook is a horrible thing with large gaping security holes in it and they do make other e-mail programs for winblows.... er windoze... er windoes... oh nevermind.

If ya refuse to use an os with a little bit of security at least try to find an e-mail client that wont trash your computer.”

“Here is an update on this virus. It appears to work by deleting all Windows files and ‘converting’ your machine to a Mac operating system. Learn how to protect your computer from this nasty virus.”

“A week ago Sat, I sent out emails to my scout parents in the Am. In the evening I sent out emails to two scout leaders, and one called me to say that the AM message was clean, but the PM one made his virus software warn of the Klez virus. In between I had opened one email from our own Phil, and my husband had opened a suspicious email from a friend, but neither of us got a virus warning from Yahoo's Norton or my own McAfee.

Anyway, I have since scanned with several different anti virus softwares and have found nothing. But I am afraid to send out emails, and haven't since last Sat. Does anyone have any advice? Should I think that my scout leader friend got an erroneous Klez warning, or did Yahoo temporarily have an infection that was not on my computer?”

“I now yahoo was acting a little strange last week. I think it was saturday. Normally my virus program always finds the klez virus. I have some problems with IRC viruses, but Klez is pretty easy to find. Go to symantec.com and scan your computer for free. Then you'll know for sure if you have the virus.”

“I tried to scan with Symantec but my McAfee popped up and said that I was downloading a file with a virus. I deleted that file, but the Symantec scan was so slow that I cancelled it. I know that at Micro Trend I was told to disable McAfee before the scan, and so I didn't do that with the Symantec scan. So why did Mcafee find a virus in a Symantec file and what would happen if I had disabled McAfee first? And would the Symantec scan have been faster? At the rate it was going it would have taken 10 hours to scan my files.”

“You might try www.antivirus.com

You might also ask Mcafee what is going on. I know some klez variants can disable anti-virus programs, but I'm not sure how it would look if it was happening.

Maybe McAfee picked up virus data on the Symantec?”

“I got an email a week or so ago that downloaded a virus to my laptop. It did not infect our server, but I had to have my computer scrubbed and reformatted. I have the latest Norton updates and I never received any warning. When the download started, I undocked the computer, but it was too late. However, I was not online when it attempted to access Outlook.”

“www.antivirus.com is Micro Trend. They were unable to find any virus on my computer.”

“Wow Chili, that is an eye opener!”

“Chili, if you received no warning from Norton, how did you know that you had a virus? What did you see?”

“I saw a download screen open up. At first I was a little confused and thought that our server would have blocked a virus download. After about 5 seconds, I figured this was not good and undocked, breaking my network connection. Too late. I then got a message that Outlook was being accessed.

The Norton log showed alot of activity, but I didn't get any warnings at the time.”

“Thanks, I'm just trying to learn more about this to know what is out there. I had emailed McAfee Support with questions, but I didn't have some basic computer software info they wanted (which version of Explorer) so they said that they couldn't help. I have since update my Windows and Explorer with all available patches and know a little more about what I have, so I'll try them again.”

“Lyndy on the explorer task bar, click "help" then slide down to "about internet explorer" and an information screen will give you the version.”

“Heh, heh, well that was easy enough. We were looking at the internet tools windows.”

“by the way... after you get all this fixed just remember bill gates considers security too be microsoft's #1 priority and version xx.x is the most secure product ever.”

“When we got Klez it came in an email that read " Hope you enjoy this website, I sure did" or something similuar, with a friend's email addy attached to it. Everything slowly broke down, over a week, until the computer ran so slow we couldn't do anything with it. Norton never caught it but we had the old version at the time. It's a nasty bug!”

“I have McAfee online that updates whenever they create a new patch, and scans once a week all the files, on a schedule. It is frustrating that a friend could get an email from me that I definitely sent (with no attachments), and get a virus message. Then when I search for the virus to delete it I can't find it.”

“i had a virus a couple month ago. symantec did not recognize it, but I knew something was wrong because the computer ran way too slow. So I changed the sensitivity of symantec and now it does recognize it (I think it was a trojan, IRC something virus...the darn virus is comming with the mIRC chat program, so the hackers can access your computer)

I don't want to know what kind of info they all got of my 'puter. CHeck your virus program and make sure you have the sensitivity set to "high". On norton it is called bloodhound.

you should think that those darn hackers have better things in life then computers. come on now!!!”

“I ditched McAfee in favor of Norton...works a whole lot better. It quarantines all the viruses out there. I update the definitions a couple times a week, and Norton is a whole lot more user friendly than McAfee IMHO.

My ISP also has a DECLUDE functions that identifies E-mails with most attached viruses...it stops them before they ever get to me. The ISP then sends an E-mail to me letting me know who I had been sent an infected E-mail.”

“I have used PC-Cillin for many years with good results. They have a "housecalls" computer check that excellent.

McAfee at one time was the industry standard but no more & Norton gets erratic.”

“I had McAfee on my laptop, and had heard that the other antivirus didn't work well with other antivirus software, so I stuck with it, when I switched to the online version.

If I were to switch to a different antivirus software, will I have a problem with the old McAfee files interfering with the new software?

And back to my first question, if I have searched for the Klez files and not found them, using several different anti-virus companies and methods (safe mode, regular mode), can I feel safe and send out emails again?”

“I have McAfee at home and Norton at work. The Norton updates itself. I got some feedback about a virus and did a complete separate scan. Couldn't find the virus in question.”

“Phil what do you mean a feedback about a virus? From one of my emails? I don't think that I had it until after I emailed the TT'er by State lists to you. Luckily, I didn't email much that day and my friend called me immediately to alert me to his virus warning on my email.”

“I got the following message and didn't read it carefully. I ran McAfee (which scans my email automatically anyway) and it didn't detect anything. My son and I think it this just spam trying to sell virus software. I haven't had anyone tell me I have sent them a virus:

Date: Sat, 16 Nov 2002 08:49:20 -0600
From: "MailScanner"
To:
Subject: Warning: E-mail viruses detected


Our virus detector has just been triggered by a message you sent:-
To:
Subject: From $39
Date: Sat Nov 16 08:49:20 2002
Any infected parts of the message have not been delivered.


This message is simply to warn you that your computer system may have a
virus present and should be checked.


The virus detector said this about the message:
Report: gAGEnHh27967/From.scr Infection: W32/Klez.H@mm
Windows Screensavers often hide viruses in email (From.scr)


--
MailScanner
Email Virus Scanner”

“Well okay .....


This stuff is giving me a headache.”

“It cost $40 for our local computer guy to take a look see....and that price went towards the clean up, or in our case, reformating). Frustrating isn't it?! Klez is a product of the DEBOL!”

“I was reading Pennsy's REAL trip report when all of a sudden my virus software popped up a screen. It said I had an infected A0004452.exe file and it couldn't be cleaned. I deleted it, and contacted McAfee support. I told the fellow the whole recent saga, and he said that i should put the computer into Safe Mode and do the virus scan. I had already done this on Wed, but i went and did it again. Again, nada.

I did a virus scan using the stinger utility that is supposed to find the Klez trojan and Elkern virus that randomly infects .exe files, and again nothing was found. My husband has decided that we will reformat the hard drive and start over again. I am afraid to email anyone because of this SH&T.”

“I was reading that since the Klez virus goes into an infected computer's address book and sends out copies of itself with spoofed 'from' addresses, you may never have had it at all. It is more likely that one of your friend's computers is infected and sent a message to someone with your address spoofed as the sending address.”

“I had the computer klez virus once and the computer tech that I was talking to told me that you don't even have to open the email that contains the klez attachments. One of the nasty things about the virus. If it is just sent to your mailbox, then you are possibly screwed.”