VIRUS WARNING

Several of us contacting UK-Germany this week have had virus' returned...

Usually in the form of crazy titles with exe. attachments. Do not open if your anti virus software has not already detected it. Delete & Delete again.

Still causing problems this virus

Bob,

Are you sure its a virus and not the Yam Yam accent thats causing the problems?

M

It's a virus, and it is not only being sent by "info@ukgermany" but also from many of you who have had written them in the past.

This is what I have had in the past few days!

Date: 12/13/2002, Time: 20:16:26, Master on 2GIG

The email attachment setup.exe is infected with the W32.Klez.H@mm virus.

The file was quarantined.

Date: 12/14/2002, Time: 8:47:12, Master on 2GIG

The email attachment install.scr is infected with the W32.Klez.H@mm virus.

The file was quarantined.

Date: 12/14/2002, Time: 8:47:18, Master on 2GIG

The email attachment footer_05 is infected with the W32.Klez.H@mm virus.

The file was quarantined.

Date: 12/14/2002, Time: 15:30:54, Master on 2GIG

The email attachment Gipwb.exe is infected with the W32.Klez.H@mm virus.

The file was quarantined.

Date: 12/14/2002, Time: 15:31:04, Master on 2GIG

The email attachment Uwdz.bat is infected with the W32.Klez.H@mm virus.

The file was quarantined.

Date: 12/15/2002, Time: 8:37:16, Master on 2GIG

The email attachment Jyqdg.bat is infected with the W32.Klez.H@mm virus.

The file was quarantined.

Date: 12/15/2002, Time: 8:37:26, Master on 2GIG

The email attachment Tkdlz.pif is infected with the W32.Klez.H@mm virus.

The file was quarantined.

Date: 12/16/2002, Time: 6:19:18, Master on 2GIG

The email attachment Gyem.scr is infected with the W32.Klez.H@mm virus.

The file was quarantined.

Date: 12/16/2002, Time: 6:19:22, Master on 2GIG

The email attachment Dscn0011.pif is infected with the W32.Klez.H@mm virus.

The file was quarantined.

The removal tool for this Virus

Due to a decreased rate of submissions, Symantec Security Response has downgraded the threat level for W32.Klez.E@mm from Category 3 to Category 2 as of July 23, 2002.

W32.Klez.E@mm is similar to W32.Klez.A@mm. It is a mass-mailing email worm that also attempts to copy itself to network shares. The worm uses random subject lines, message bodies, and attachment file names.

The worm exploits a vulnerability in Microsoft Outlook and Outlook Express in an attempt to execute itself when you open or even preview the message in which it is contained. Information and a patch for the vulnerability are available at http://www.microsoft.com/technet/security/...in/MS01-020.asp.

The worm overwrites files and creates hidden copies of the originals. In addition, the worm drops the virus W32.Elkern.3587, which is similar to W32.ElKern.3326.

The worm attempts to disable some common antivirus products and has a payload which fills files with all zeroes.

Ok, thanks, I am downloading the 2 mb patches for IE/)E 6 now.

Its always good idea not to open exe/vbs/bat/com files. :angryfire:

Best Idea is to just pay the $40 per year and get a good Antivirus software package. Also remember they are worthless if you don't get the weekly/monthly updates.