W32.Klez.gen@mm

Risk Level 2: Low

Discovered:
November 9, 2001
Updated:
February 13, 2007 11:39:22 AM
Also Known As:
W32/Klez.e@MM, W32/Klez.h@MM, W32/Klez.gen@MM, WORM_KLEZ.E, WORM_KLEZ.G, I-Worm.Klez.e, I-Worm.Klez.h, W32/Klez-E, W32/Klez-G, W32/Klez-H
Type:
Worm, Virus
Systems Affected:
Windows 2000, Windows 95, Windows 98, Windows Me, Windows NT, Windows XP
CVE References:
CVE-2001-0154


W32.Klez.gen@mm is a generic detection that detects variants of W32.Klez.

In response to an increased number of variants of W32.Klez@mm, the generic detection, W32.Klez.gen@mm, was created. It was initially released with the definitions released on November 9, 2001.

Removal tool
Symantec has provided a tool to remove infections of all known variants of W32.Klez and W32.ElKern. If your computer is detected as infected with W32.Klez.gen@mm, download and run the tool. In most cases, the tool will be able to remove the infection. Try the tool first, as it is the easiest way to remove these threats.

To view an online demonstration on how to download and run this and several other tools, click here.




As aforementioned, in response to an increased number of variants of W32.Klez@mm, the generic detection, W32.Klez.gen@mm, was created. It was initially released with the definitions released on November 9, 2001. This generic detection method has been improved upon and updated several times since then. And, it now includes the .E and .H variants. Specific information about the W32.Klez.E@mm and W32.Klez.H@mm variants can be found at W32.Klez.E@mm and W32.Klez.H@mm, respectively.

For information about how Klez affects a Macintosh, refer to the document, "Are Macintoshes affected by the Klez virus?"

Antivirus Protection Dates

  • Initial Rapid Release version November 9, 2001
  • Latest Rapid Release version May 10, 2011 revision 002
  • Initial Daily Certified version November 9, 2001
  • Latest Daily Certified version May 10, 2011 revision 003
  • Initial Weekly Certified release date November 9, 2001
Click here for a more detailed description of Rapid Release and Daily Certified virus definitions.

Threat Assessment

Wild

  • Wild Level: Low
  • Number of Infections: More than 1000
  • Number of Sites: More than 10
  • Geographical Distribution: Medium
  • Threat Containment: Moderate
  • Removal: Difficult

Damage

  • Damage Level: Medium

Distribution

  • Distribution Level: High
Writeup By: Douglas Knowles

Search Threats

Search by name

Example: W32.Beagle.AG@mm
ThreatCon Widget
Internet Security Threat Report, Volume 16
Symantec DeepSight Screensaver