Dismiss Notice

Welcome To CK5!

Registering is free and easy! Hope to see you on the forums soon.

Score a FREE t-shirt and membership sticker when you sign up for a Premium Membership and choose the recurring plan.

KLEZ virus

Discussion in 'The Lounge' started by Pure Insanity, May 19, 2002.

  1. Pure Insanity

    Pure Insanity 1/2 ton status

    Joined:
    Mar 17, 2001
    Posts:
    4,579
    Likes Received:
    0
    Location:
    Dade City, Florida
    I have been having puter problems, and Saturday morning my ISP called us at home and told us we are showing a virus when we are online.

    Sandi went out Sat. afternoon and got a new version of McAfee. It took FOREVER to get the virus cleaned out. She was at it from about 3-5:30 then 7- 1 AM last nite. Then again this morning from 9 - 2:30 before it was gone! What a PITA! Klez attacks your anti- virus software. How ironic. We have never had a virus before so I am amazed at this.....We had over 200 files infected! /forums/images/icons/shocked.gif The worst part is we have no idea where it came from at all. I pretty much only come here and Webshots. And Sandi is pretty much at Liquid Generation and WWF/(E).

    Anyone have any idea how we could have gotten this?
     
  2. Djroffroad

    Djroffroad 1/2 ton status

    Joined:
    Mar 19, 2002
    Posts:
    1,047
    Likes Received:
    0
    Location:
    Portland, Oregon
    I have been hearing about viruses that get to you from chat rooms and instant messages.
     
  3. Pure Insanity

    Pure Insanity 1/2 ton status

    Joined:
    Mar 17, 2001
    Posts:
    4,579
    Likes Received:
    0
    Location:
    Dade City, Florida
    Havent heard of those before but we only talk to people we know. All I know is I want to find this Klez guy, roll up all the sheets of paper we had to print to read while doing this, and ram them up his arse! Heres a few paper cuts for ya! HEHE!

    We now have ALL sorts of stuff to avoid viruses, firewalls and all sorts of stuff Ive never heard of.
     
  4. Djroffroad

    Djroffroad 1/2 ton status

    Joined:
    Mar 19, 2002
    Posts:
    1,047
    Likes Received:
    0
    Location:
    Portland, Oregon
    I'm not familiar with these chat room viruses myself, but I don't think it matters who's in the room. From what I understand, it leaves an open window to your computer.

    I used McAffee and got rid of it.
    I use Norton now. I do alot of downloads and I use Norton before I do anything with them. Norton is also supose to pre-scan all my downloads, emails, photos, and a bunch of other crap automatically for me.

    Haven't had a problem yet..(knock on wood)
     
  5. Pure Insanity

    Pure Insanity 1/2 ton status

    Joined:
    Mar 17, 2001
    Posts:
    4,579
    Likes Received:
    0
    Location:
    Dade City, Florida
    When Sandi went to get a new AV, she compared what Norton and McAfee had and she went w/ the McAfee.

    I suppose I should just consider myself lucky, we have been online for about a yr and a half, and this is the 1st virus we got.
     
  6. Djroffroad

    Djroffroad 1/2 ton status

    Joined:
    Mar 19, 2002
    Posts:
    1,047
    Likes Received:
    0
    Location:
    Portland, Oregon
    The McAfee I ended up with, I had to pay a yearly fee, and also had to be online for a full system scan for some reason.

    With Norton, I don't have to log on to scan, and I don't have to have a membership to get updates.

    Probably would be different if I bought McAfee from a store, rather than getting it online, but I wasn't happy with it. It also let one virus slip through. It detected it before anything happened, but the virus still managed to install itself.
     
  7. Pure Insanity

    Pure Insanity 1/2 ton status

    Joined:
    Mar 17, 2001
    Posts:
    4,579
    Likes Received:
    0
    Location:
    Dade City, Florida
    I know we have to be online to update, but we dont have to be online to scan.

    I havent got a clue about paying for updates. Ill have to ask her.

    I had Norton till Saturday and it let Klez get thru.
     
  8. Redfrog

    Redfrog 1/2 ton status

    Joined:
    May 4, 2001
    Posts:
    753
    Likes Received:
    0
    Location:
    IL
    I am wondering where I am getting it to. My Norton has been catching it but I have been getting it in E-mails once or twice a day for the last two weeks off and on..WTF!!!!!!!!!!!!!

    I'm just glad that Norton has cought it /forums/images/icons/smile.gif
     
  9. Pure Insanity

    Pure Insanity 1/2 ton status

    Joined:
    Mar 17, 2001
    Posts:
    4,579
    Likes Received:
    0
    Location:
    Dade City, Florida
    Be REAL glad Norton has caught it! It has been a nitemare!

    I just wish I knew where I got it from. Im afraid to go anywhere now.
     
  10. tRustyK5

    tRustyK5 Big meanie Staff Member Super Moderator GMOTM Winner Author

    Joined:
    Jul 23, 2000
    Posts:
    36,188
    Likes Received:
    1,396
    Location:
    E-town baby!
    Better warn all the people on your email address list...

    Rene
     
  11. Pure Insanity

    Pure Insanity 1/2 ton status

    Joined:
    Mar 17, 2001
    Posts:
    4,579
    Likes Received:
    0
    Location:
    Dade City, Florida
    She already knows. Its just Sandi. Im glad I rarely send Emails now. Most anyone I talk to is on here so I shoot a P/M. Maybe I should broaden my horizons some. LOL!!!

    No really I have only sent 1 Email in the last month or 2, and it was to Sandi. And anyone she Emails was already contacted about it.

    Kinda like a STD, we need you to contact everyone you.............LOL!!
     
  12. tRustyK5

    tRustyK5 Big meanie Staff Member Super Moderator GMOTM Winner Author

    Joined:
    Jul 23, 2000
    Posts:
    36,188
    Likes Received:
    1,396
    Location:
    E-town baby!
    It's not really the emails you send...usually the virus uses your 'address' book and sends itself out without your knowledge. Everyone in your address book needs to be warned...

    I set the first address in my address book to "!000@wormalert.com" this way if I get anything in my inbox saying returned email to that address I know a virus was trying to send itself out and my puter needs a scan!

    Rene
     
  13. four_by_ken

    four_by_ken 1/2 ton status

    Joined:
    Jun 9, 2001
    Posts:
    3,806
    Likes Received:
    0
    Location:
    Allenton, MI
    Almost always the viruses people get are from an attachment through an e-mail. Almost always.

    Ken H.
     
  14. newyorkin

    newyorkin 1 ton status

    Joined:
    May 8, 2001
    Posts:
    16,555
    Likes Received:
    157
    Location:
    Los Estados Unitos
    Klez sucks!! I bet it was you that sent it to me a couple weeks ago!!

    Klez is particularly dangerous because it can run in "preview" mode in Outlook/Outlook express. This means you basically don't have to open any attachments to get infected, you just have to click on the message in the message list.
    Also, it not only harvests your address book, but any email address it can find in your computer, including email addresses from web pages stored in your cache. Then, it may or may not attach someone from your address book's name to the "from" section of the email it sends out. So you could've sent it to a couple hundred people, and it looks like it came from someone totally different!

    I had a client call my weekend job last week in a panic. He had the Klez virus and it was sending porno pages to his corporate office. He told his office that's just what the virus does (grabs porn from the web and sends it as him), but it was actually all files from his computer's cache... A reminder to never do anything on your computer you wouldn't be embarassed to see attached to your name on the nightly news...

    <a target="_blank" href=http://www.sarc.com/avcenter/venc/data/w32.klez.h@mm.html>Klez info from SARC</a>.

    I'd without hesitating run windows update, install any patches it suggests, and then upgrade to I.E. 6.
     
  15. Pure Insanity

    Pure Insanity 1/2 ton status

    Joined:
    Mar 17, 2001
    Posts:
    4,579
    Likes Received:
    0
    Location:
    Dade City, Florida
    I have my adress book on Yahoo. I dont have mail thru my ISP. Will it still go after those also?
     
  16. Pure Insanity

    Pure Insanity 1/2 ton status

    Joined:
    Mar 17, 2001
    Posts:
    4,579
    Likes Received:
    0
    Location:
    Dade City, Florida
    The only attatchment we have D/L is from a friend that doesnt have any problems. I have heard this one can come from anywhere.
     
  17. Pure Insanity

    Pure Insanity 1/2 ton status

    Joined:
    Mar 17, 2001
    Posts:
    4,579
    Likes Received:
    0
    Location:
    Dade City, Florida
    It wasnt from me that I know of. I only had it for a week max. We had a feeling we had a virus before our ISP called and confirmed it. It had only been a few days and it was already causing quite a ruckus.

    We have already run the windows updates. And I think I am running IE 6 already too.

    Thanx for the info tho. LOL! That would be very valuable if we had not been told before.

    I have a funny feeling I know where it came from and if I get another Email I am going to forward it to Yahoo.
     

Share This Page