KLEZ_H worm

Over the last several days, I received several e-mails from various servers indicating that “my” e-mail (sender: fred@unicyclist.com) was not deliverable. In fact, I never sent any of these mails in the first place. All returned messages had the KLEZ_H worm attached.
What this means is that someone who has my e-mail address in their mailing list has the KLEZ_H worm on their computer…
Please refer to your trusty anti-virus software or to


for instructions how to remove the nasty critter.

Have uni-que fun,
Fred

Re: KLEZ_H worm

“Fred” <fred.apy7z@timelimit.unicyclist.com> wrote in message
news:fred.apy7z@timelimit.unicyclist.com
>
> Over the last several days, I received several e-mails from various
> servers indicating that “my” e-mail (sender: fred@unicyclist.com) was
> not deliverable. In fact, I never sent any of these mails in the first
> place. All returned messages had the KLEZ_H worm attached.
> What this means is that someone who has my e-mail address in their
> mailing list has the KLEZ_H worm on their computer…
> Please refer to your trusty anti-virus software or to
> http://tinyurl.com/538
> for instructions how to remove the nasty critter.
>
> Have uni-que fun,
> Fred

It probably means YOU have the klez_h worm and it’s replicating with your
email program.

Pursuant to US Code, Title 47, Chapter 5, Subchapter II, 227, any and all
unsolicited commercial E-mail sent to this address is subject to a download
and archival fee in the amount of $500 US. E-mailing denotes acceptance of
these terms.

Re: Re: KLEZ_H worm

Nope, KLEZ forges the email and uses its own SMTP program to send the mail. The mail is not sent by Outlook. The name in the sender for the email is not the person who is infected.

I also got a couple of emails with the KLEZ_H worm sent to my hotmail account over the weekend. Someone is infected and it is probably someone on this list.

For more info on KLEZ see
<http://www.sophos.com/virusinfo/analyses/w32klezh.html&gt;
<http://www.sophos.com/virusinfo/articles/klezh2.html&gt;

An online virus scan (for Windows users) is available at
<http://housecall.antivirus.com/&gt;
Everyone should give their computer a scan.

The hole that allows this worm to spread has been patched by Microsoft many many months ago. Make sure you have the following update installed
<Microsoft Learn: Build skills that open doors in your career;
and KLEZ will not be able to spread or reinfect you.

Re: KLEZ_H worm

In article <john_childs.aqfl0@timelimit.unicyclist.com>,
john_childs <john_childs.aqfl0@timelimit.unicyclist.com> wrote:
)
)The hole that allows this worm to spread has been patched by Microsoft
)many many months ago. Make sure you have the following update
)installed
)<http://tinyurl.com/1d7i>
)and KLEZ will not be able to spread or reinfect you.

The hole which allows such worms to spread was patched about 10 years ago
by Linus Torvalds. If you’re waiting for a fix from Microsoft you’ll be
waiting a long time.
-Tom

The worm continues to be mailed (with my e-mail address as the sender…) - I keep receiving undeliverable mails.
When looking at the “returned” mails (remember, they did not originate in my computer) more closely it is obvious that the mails originate with someone who is using bellsouth.net (possibly via DSL).
Please check your computers for the KLEZ_H worm.

Have fun,
Fred