|
|
|
Symantec WARNS of a computer worm: W32.Klez.e@mm
| Date: |
March 7, 2002 |
| Name: |
W32.Klez.e@mm |
| Threat Assessment: |
Upgraded to Level 3 |
| Description: |
Symantec first had definitions for W32.Klez.e@mm
since January 17, 2002 and Klez was given a level 2 rating on a scale of
1-5, with 5 being the most serious. W32.Klez.e@mm is a mass-mailing
worm that also attempts to copy itself to network shares. It also uses random
subject lines, message bodies and attachment file names and triggers on
the 6th of every second month. W32.Klez.e@mm also overwrites files and creates
hidden copies of the original. The worm also attempts to disable some common
AV products and has a payload that fills files with all zeros, which means
the users will not be able to repair. Instead users will need to restore
files from backup. W32.Klez.e@mm e-mails itself out to addresses found in
local files, Outlook and ICQ (a chat client that works on a proprietary
network such as AOL) address books. Since January 17, there has been a steady
increase in the number of submissions made. Globally, Symantec Security
Response has received a high number of submissions with Asia Pacific representing
about 9 percent of all worldwide submissions. |
| Definitions From Symantec |
Available. Customers that have updated
their definitions since January 17 are protected. |
| Symantec Security Response |
Symantec Security Response is one of the industry’s
largest dedicated team of virus experts. With offices located in the United
States, Japan, Australia and the Netherlands, the sun never sets on Symantec
Security Response. The centre’s mission is to provide swift, global responses
to computer virus threats, proactively research and develop technologies
that eliminate such threats and educate the public on safe computing practices.
As new computer viruses appear, Symantec Security Response develops identification
and detection for these viruses and provides either a repair or delete operation,
thus keeping users protected against the latest virus threats http://securityresponse.symantec.com.
|
| Symantec: |
Symantec, the world leader in Internet security
technology, provides a broad range of content and network security software
and appliance solutions to individuals, enterprises and service providers.
The company is a leading provider of client, gateway and server security
solutions for virus protection, firewall and virtual private network, vulnerability
management, intrusion detection, Internet content and e-mail filtering,
remote management technologies and security services to enterprises and
service providers around the world. Symantec’s Norton brand of consumer
security products is a leader in worldwide retail sales and industry awards.
Headquartered in Cupertino, Calif., Symantec has worldwide operations in
38 countries. For more information, please visit www.symantec.com. |
|
|
|
