Klarinet Archive - Posting 000090.txt from 2002/05

From: "James Leonard Hobby" <jhobby@-----.net>
Subj: [kl] More virus info.
Date: Fri, 3 May 2002 15:59:06 -0400

I received this message from a friend:

>The 'Klez' virus has taken another turn. This one is scary.
>
?One of our users here received a copy of the worm, (which Norton
>summarily quarantined) containing a most interesting and
>disturbing story line. (See below) When reading this, remember
>that this message came containing the very bug it purports to protect
>against.
>
><snip>
>"Klez.E is the most common world-wide spreading worm.
>"It's very dangerous by corrupting your files.
>"Because of its very smart stealth and anti-anti-virus technic,
>"most common AV software can't detect or clean it.
>"We developed this free immunity tool to defeat the malicious virus.
>"You only need to run this tool once, and then Klez will never come into
>"your PC.
>"NOTE: Because this tool acts as a fake Klez to fool the real worm,
>"some AV monitor maybe cry when you run it. If so, ignore the warning,
>"and select 'continue'.
>"If you have any question, please mail to me.
>[end]

>Note that English is likely not the writer's first language. Computer
>viruses are not like biological ones. You do not give your system
>killed viruses to make it build antibodies to the real ones.
>The message contains several falsehoods, and *should* be easy to spot as
>bogus. That *should* is what has me worried.

>For information on the virus, see:
>http://securityresponse.symantec.com/avcenter/venc/data/w32.klez.e@-----.html
>
>For Updates, see:
>Norton: http://www.symantec.com/avcenter/defs.download.html
>McAfee: http://www.mcafeeb2b.com/naicommon/download/dats/find.asp
>
>Have a virus free weekend,

---------------------------------------------------------------------