CUPERTINO, Calif. - April 25, 2002 - Symantec Security Response has upgraded W32.Klez to a level 4 virus threat. W32.Klez and its variants are spreading more quickly than most viruses that Symantec Security Response has tracked. On average, Symantec Security Response is receiving more than 3,000 submissions per day of W32.Klez and its variants. In comparison, at the peak of the Sircam virus, Symantec Security Response received approximately 1,500 submissions per day.
W32.Klez.H®mm spreads by sending itself as an attachment to e-mail addresses found in the Windows address book, the ICQ database, and local files. The e-mail arrives with a random subject line. The worm randomly chooses a file from the infected machine to send along with the worm to recipients. It spreads through network share drives and is capable of infecting files.
Additionally, the worm exploits an old vulnerability in Microsoft Outlook and Outlook Express in an attempt to execute itself when the user opens or even previews the message. Information and a patch for the vulnerability can be found at http://www.microsoft.com/technet/security/bulletin/MS01-020.asp.
Symantec Security Response recommends users update their virus definitions and Microsoft security patches to prevent infection. For detailed information and removal tool for W32.Klez, visit the Symantec Security Response Web site at http://securityresponse.symantec.com. Computer users who are concerned that they may have received a virus can easily scan their system using Symantec Security Check Web site at http://www.symantec.com/securitycheck.
About Symantec Security Response
Symantec Security Response is a team of Internet security experts who deliver solutions, services and response capabilities to Symantec customers worldwide, 24 hours a day, seven days a week. The research centers are focused on collecting and analyzing the latest malware threats such as viruses and worms, as well as network security threats and vulnerabilities. Symantec¹s technical support experts provide customers with information on product implementation and usage, as well as countermeasures and identification tools for new threats. Symantec Security Response also provides time-sensitive security advisories using Web updates, alerting services, technical support and media alerts.
Symantec is the world leader in providing solutions to help individuals and enterprises assure the security, availability, and integrity of their information. Headquartered in Cupertino, Calif., Symantec has operations in more than 40 countries. More information is available at www.symantec.com.
NOTE TO EDITORS: : If you would like additional information on Symantec Corporation and its products, please view the Symantec Press Center at http://www.symantec.com/PressCenter/ on Symantec's Web site. All prices noted are in US dollars and are valid only in the United States.
Symantec, the Symantec logo, VERITAS, and the VERITAS logo are trademarks or registered trademarks of Symantec Corporation or its affiliates in the United States and certain other countries. Additional company and product names may be trademarks or registered trademarks of the individual companies and are respectfully acknowledged.