|
28 Jun 02 - 11:20 PM (#739237) Subject: Caution: new outbreak of computer worm From: Mark Cohen I've received a bunch of emails recently all containing the W32.Klez.H@mm worm. All have been detected by my Norton Antivirus program. Here is information on the W32.Klez worm from the Symantec (Norton) website, including a link to a method of removing it. The site says its damage potential is relatively high and it's difficult to remove. So......for safety, get yourself a good antivirus program (I'd recommend either Norton or McAfee, though others may have different opinions, and, most importantly KEEP IT UP TO DATE. You need to download the latest virus definitions at least every week or two. I know that's a pain in the butt if you have a slow connection, but not nearly as big a pain as getting infected. Aloha, Mark |
|
28 Jun 02 - 11:22 PM (#739240) Subject: RE: Caution: new outbreak of computer worm From: Mark Cohen PS, I sure hope the worm who created this worm isn't a Klezmer music fan! (Just to keep this musically relevant...) |
|
28 Jun 02 - 11:23 PM (#739241) Subject: RE: Caution: new outbreak of computer worm From: GUEST Not using Outlook Express is the best security move you can make |
|
29 Jun 02 - 12:53 AM (#739275) Subject: RE: Caution: new outbreak of computer worm From: hesperis AVG antivirus, FREE from grisoft.com - good one to get if you can't get Norton. |
|
29 Jun 02 - 01:48 AM (#739285) Subject: RE: Caution: new outbreak of computer worm From: michaelr Norton Antivirus updates itself automatically while you're online, so that's one less thing to remember to do. |
|
29 Jun 02 - 06:10 AM (#739339) Subject: RE: Caution: new outbreak of computer worm From: Mr Red Yea I had two hits. One had the cheek to pose as postmaster@cresby.com and tell me it was un-delivered mail (see attachment). Even though I AM the postmaster & it fooled me for just long enough. But Norton had already quarrantined it. luckless folkie source has got up-to-date AV, Firewall and updates regularly. NOW! Worse still I had an e-mail from an agency finding me work and they sent the search results in an exe file - dumb or what! It gets dumber they sent two pages with page one "nothing" & P2 un-accessable and looking at the search criteria they got that wrong too. Well at least their stupidity is consistent and thorough. |
|
29 Jun 02 - 07:47 AM (#739354) Subject: RE: Caution: new outbreak of computer worm From: Jeanie "Guest" of 11.23 A.M. (and anyone else who can help with an answer): Does that mean that a virus can't get into your computer if you check your e-mails via the provider's website,with your password ? I have a new computer, so I can check my old Supanet and Beeb e-mail addresses that way, now, but I'm now using Outlook Express and a new Freeserve address. Should I be checking the e-mails through freeserve website instead of Outlook Express, to avoid the viruses ? I had Kakworm on my old computer and had to de-worm it every time I switched on. Yes, Mark, this new virus gives Klezmer a bad name ! The same thought had struck me. - jeanie |
|
29 Jun 02 - 08:51 AM (#739367) Subject: RE: Caution: new outbreak of computer worm From: Celtic Soul My honey, a techie, says that McAfee antivirus program is also good, though he does prefer Norton. He says that updating Norton is easier, but that there are those that say McAfee is better (though he does not know why). |
|
29 Jun 02 - 10:51 AM (#739406) Subject: RE: Caution: new outbreak of computer worm From: mack/misophist Yes, you are safer using web based e-mail services. However, viruses can change at any instant so the safest thing is to keep a good virus program up to date and to STOP USING VIRUS FRIENDLY OUTLOOK. There are several good FREE e-mail programs you can use instead. Or you can stick with web based e-mail. |
|
29 Jun 02 - 11:05 AM (#739409) Subject: RE: Caution: new outbreak of computer worm From: Justa Picker I'd recommend Mail Washer. It acts as a "bridge" between your e-mail server (where your e-mail is stored on your ISP's computer) and your e-mail program. It shows you what e-mails are waiting for you to download, and, what of those e-mails contain attachments. You can then make an executive decision as to what you want to allow to come into your computer (using your e-mail program to download the mail from your server) or, you can delete whatever e-mails you want at the server level, without those seeing the light of day on your computer. I like it alot. |
|
29 Jun 02 - 11:59 AM (#739421) Subject: RE: Caution: new outbreak of computer worm From: Big Mick I use Outlook and Norton Anti Virus. I have not had the first problem with them, they have worked very well. I have received any number of emails with this worm in them and NAV catches them and quarantines them immediately. Works very well, and it is nice that I don't have to update, it just does it in the background while I am online. Mick |
|
29 Jun 02 - 12:32 PM (#739431) Subject: RE: Caution: new outbreak of computer worm From: Don Firth Well, I guess I'm not the only one, then. During the past couple of weeks, I've felt that checking my e-mail was sort of like one of those Fifties science fiction movies where the space ship blasts off for Mars and the first thing that happens is they run into a meteor shower that just about destroys them. Almost every day, one of the e-mails that comes in (invariably from someone I don't know and including an attachment) invokes the Norton AntiVirus screen with the red banner, "VIRUS ALERT!" NAV immediately quarantines the thing. I delete it from the in-box, then zap it from the quarantine folder, and all is well again. One that has come in several times within the past week has a different "From:" each time, the "Subject" line says something about an update, and the attachment is "IE-6.bat" or some variation thereof. What gets me is that this has happened almost every day during the past couple of weeks, and one day, four times! Is someone out to get me specifically, or has it been happening to everybody this often? I use Outlook Express and I update NAV frequently. So far, NAV has nailed everything as it tries to come through the door, so it's no sweat, just a lot of irritation. Normally I'm a peaceable person, but I'd like to get hold of the moral mouth-breathers who do this sort of thing, break their goddam necks, wait till they heal up, then break 'em again! Don Firth |
|
29 Jun 02 - 12:34 PM (#739433) Subject: RE: Caution: new outbreak of computer worm From: Bill D I have Norton, but have not renewed it recently...I use the free AVG most of the time, and it updates regularly & automatically. And yes, checking mail using a program such as MailWasher...or, my current favorite, PopTray will allow you to view your waiting mail without it ever getting to your computer! You can then delete ANYTHING you do not want, spam..possible virii, etc...and then open your regular mail program. Takes only a few extra seconds, and gives a lot of peace of mind! There are probably a dozen good, workable mail checking programs...and several regularemail programs which are much better than Outlook Express...try Eudora, Pegasus, Foxmail, Calypso...Really, folks you do NOT have to be content with what Microsoft gives you! |
|
29 Jun 02 - 01:20 PM (#739451) Subject: RE: Caution: new outbreak of computer worm From: Don Firth Question:-- Outlook Express came pre-loaded on my computer (hopped aboard automatically when my vendor load Windows 98), it worked fine for me, and I couldn't see any reason not to go ahead and use it. I've used it now for several years and I've never had a problem with it. Granted, the nastynerds who write and distribute viruses seem to target Microsoft products in particular, but to stop using it for that reason means the nastynerds win, so to hell with them. Also, NAV has shot down every virus so far. "Don't use Outlook Express" seems like a knee-jerk reaction to me. I can't see what so many people have against it other than a general dislike for Bill Gates. Can someone explain this to me? Don Firth |
|
29 Jun 02 - 02:09 PM (#739461) Subject: RE: Caution: new outbreak of computer worm From: Mark Cohen As noted, "Don't use Outlook" is not a very helpful response. I don't (I use Netscape and Hotmail) and I still get viruses in my email. I use MailWasher, too, but it didn't warn me about the Klez emails. If I hadn't had Norton, I'd have been hit. I wonder how often MailWasher updates its virus files... Aloha, Mark |
|
29 Jun 02 - 05:38 PM (#739527) Subject: RE: Caution: new outbreak of computer worm From: JohnInKansas Outlook Express is more frequently targeted than many other prgrams, simply because more people use it and the vermin who create these vermin want to have a "large impact." With any software related to main operating system and/or network communication, you need to keep up to date with the updates and "fixes" that are issued from time to time. There are a couple of service releases available for most versions of OE that you should have installed, if that's what you use. A good anti-virus program is almost a requirement if you are using email. Norton and McAfee are probably the most popular "mainstream" products, and either is a good choice. The difficulty with "freeware," "shareware," or products that come from smaller producers is that you don't have as much "reputation" to rely on so there is more of a burden on you - the user - to try to decide whether they do all they should. One of the reasons I recently switched from McAfee to Norton is that I can't get into the McAfee site without picking up a sh...t load of popups and cookies. It's a fairly minor annoyance, but why should I be annoyed - especially when I go there to solve problems with junk. McAfee has also caused some concern by its recent refusal to permit a couple of major magazines to include their AV in product reviews. There may be business reasons for this - but it does make you wonder if there's something they don't want found??? Perhaps someone has seen their explanation? John |
|
29 Jun 02 - 06:47 PM (#739563) Subject: RE: Caution: new outbreak of computer worm From: Art Thieme This is something like tennis elbow, right? Art Thieme |
|
29 Jun 02 - 08:31 PM (#739579) Subject: RE: Caution: new outbreak of computer worm From: Peter K (Fionn) Don, why not try using your own judgment? If you tried using an email client like Eudora long enough to become familiar with how it works (a day or two) you might find, like many other people, that it is actually better than the one that was foisted on you by Microsoft. In my view AV programs can mess around with other programs you may want to load, are generally a pain in the neck and not worth the hassle. Maybe I'll pick up an infection one day, but so might anyone like Mark who religiously updates AV protection every week. Because as long as there are AV programs there will be nerds who devote themselves to outsmarting them. And outsmart them they will (and do). Of course, I should perhaps confess that the reckless streak in me would be just a little bit curious to see a real bubonic-plague type virus let loose that reduced the worldwide web to jelly. If nothing else, it would make a slightly more level playing field for the 80 per cent of the world's population that have yet to make a telephone call. (OK, maybe it's not 80 per cent, but I know it's something staggering.) |
|
30 Jun 02 - 01:28 AM (#739657) Subject: RE: Caution: new outbreak of computer worm From: Big Mick I don't feel as though anything was foisted on me. Instead this load of "I hate Microsoft" shite, why not just tell us what the lot of you find superior in the other products. I don't try them because I am perfectly satisfied. Outlook is easy to use, has great features, and great support. I am willing to listen to other reviews if you all would care to give them. Mick |
|
30 Jun 02 - 03:34 AM (#739678) Subject: RE: Caution: new outbreak of computer worm From: allie kiwi I have the AVG antivirus prgramme and try to update it, but although the update download,s i can never get it to actually update into the thing that runs the scan. (Can you tell I'm ever so slightly computer illiterate?). All I know is, my AVG is constantly telling me that the data base is out of date. But it wont let me update. Grrr. I'm wondering - should I delete the whole AVG and re-download it? Secondly - has anyone else been getting emails suposedly from hotmail user services saying that an email could not be sent - yet you haven't actaully been trying to send one? I keep getting those 'return to sender' emails with the subject line 'cookies' and an attachment of the same name. I haven't opened the attachment, but haven't been able to find it listed as a name for a virus or worm... Allie |
|
30 Jun 02 - 04:13 AM (#739685) Subject: RE: Caution: new outbreak of computer worm From: Roger in Sheffield I don't have a problem here but a friend in the US has just emailed to say that just got hit, didn't say which virus, and I suggested Norton. Does Norton configure easily with AOl which he uses? |
|
30 Jun 02 - 04:58 AM (#739696) Subject: RE: Caution: new outbreak of computer worm From: cyder_drinker GUEST, and the other knee-jerkers: If you're that worried about getting hit, why stop at replacing outlook- replace your entire operating system. Mac's have far fewer viruses, and Linux has even less again. Don - the more people out there who have your email in their address book, the more times the worm will try to send itself on to you. Don't think of it as "they're all out to get me" - instead consider it a measure of your popularity! |
|
30 Jun 02 - 11:37 AM (#739786) Subject: RE: Caution: new outbreak of computer worm From: Geoff the Duck We got hit by this Klezworm a couple of weeks back, and it was pain in the neck. I downloaded Grisoft's AVG progra,mme, which wiped out the virus (plus another one which piggy-backs along with it), but then had to sort out the mess it had caused. It seems to infect programmes rather than delete data, and took out a lot of our more useful ones. I am still in the process of re-installing working copies.
|
|
30 Jun 02 - 01:04 PM (#739810) Subject: RE: Caution: new outbreak of computer worm From: Stilly River Sage Reviews and testimonials: I use Pegasus, it's free, its very powerful, and I've upgraded through several versions now. Since my internet provider allows for several email accounts, and since setting up the "multi-pop" feature of Pegasus is a bit confusing, I use Netscape mail for my second account. That's part of Netscape Communicator. Don --and others--if you use Outlook and don't want to get viruses, then at least go ahead and set it so it isn't in the preview mode. Then you have a better chance of stopping worms before they open before your eyes in the preview mode. I agree with the statements above--if you use web mail, you can delete suspicious posts, but if you open attachments you'll still get viruses. I simply delete suspicious posts, and you need to be pretty strict about what you consider suspect these days. Big posts, posts from people you don't know, and POSTS YOU AREN'T EXPECTING from people you know. Was Aunt Tillie going to send you a bunch of photos, or is this perhaps a worm masquerading as Aunt Tillie? If you don't know, email her before opening to ask, or play it safe and dump it. She can send it again.
|
|
30 Jun 02 - 01:07 PM (#739811) Subject: RE: Caution: new outbreak of computer worm From: Stilly River Sage This didn't load in the last post: Fionn, you might as well tell all of your friends and acquaintances to delete your email if you send any. Your attitude toward not putting in antivirus software is equivalent to sleeping with strangers and not using condoms. It's reckless behavior and is putting your friends and others at risk to get viruses through what they should be able to consider a safe source of mail. Pull up your socks and cough up $40 for some antivirus software. SRS |
|
26 Jul 02 - 06:02 AM (#754828) Subject: RE: Caution: new outbreak of computer worm From: Mark Cohen Now I just got an email from the Norton Antivirus program that's on the Hawaii State Department of Health system telling me I sent a worm-infested email to someone on their staff, whom I don't know. (Pedantic note: that's not a typo--viruses infect, parasites infest!) The explanation is that I also got the W32.Klez.H@mm worm in an email the same day from somebody I know in Honolulu. Both the DOH person and I were undoubtedly in her address book, and I know that worm uses random addresses in the "from" field on the emails it sends out. (This one had the subject line "Hi! Japanese girl VS. Playboy" or some such.) It was a little disconcerting, though, to have a government agency thinking I'm sending them tainted emails. Oh, well, sent a warning to my friend and now I'm off to do a virus scan... Aloha, Mark |
|
26 Jul 02 - 06:21 AM (#754830) Subject: RE: Caution: new outbreak of computer worm From: nickp I've recently (last 2 weeks) had a couple of emails returned 'rejected' because I had sent them infected with Klez. In fact, I hadn't sent them at all and my address (in this case used for a specific web page and so not my normal one) had been 'spoofed' from someone else's address book. If those recipients hadn't had a virus checker they'd be cussin' me without reason. A pain, but as long as there's people out there without virus checkers and as long as there's people who wish to proliferate viruses etc. it's something we'll have to work around. Hey ho! Nick |
|
26 Jul 02 - 06:38 AM (#754834) Subject: RE: Caution: new outbreak of computer worm From: GUEST,Scabby Doug - cookieless Yep. Confirm the report. We got hit here in my office last week. It's LAN-aware - doesn't even need network drive mappings. Just uses any open shares on the network. A symptom we noted here was that some documents or program screens appeared blank. It appears to hit TTF files. If you get anything like that, get your virus scanners running fast as you can. Good Luck
Steven |
|
26 Jul 02 - 11:38 AM (#754986) Subject: RE: Caution: new outbreak of computer worm From: Gypsy Well, i have nortons, and update frequently. But last winter still got majorly hit by Badtrans32. What got rid of it was deleting Outlook. I'm on Eudora.......never happier. It does have alot of extra features that i like. Not the least of which is spell check. |
|
26 Jul 02 - 12:39 PM (#755023) Subject: RE: Caution: new outbreak of computer worm From: Lonesome EJ I recently received an e-mail with attachment. I clicked on the e-mail (not trying to open the attachment), and immediately got a "you have attempted an illegal action" message. My AVG detector also put a warning on screen. I ran the scan and the detector found the virus already on the harddrive and removed it. This email is so toxic it can't even be deleted...as soon as you highlight the post, it loads the virus. It now resides in my dleted mail file, but any attempt to clear it completely loads the virus. I've never seen a virus that could be activated without even opening the attachment. |
|
26 Jul 02 - 12:48 PM (#755026) Subject: RE: Caution: new outbreak of computer worm From: Kim C Here's what happens: you'll get a "returned mail" from what looks like your own postmaster, but it's not from your postmaster, and you never sent the mail. It will usually have an attachment that says, "the attachment is the original mail." Well, if you open that attachment, guess what? Then you've got a virus. I kept getting these at my usa.net address, and they told me the mails were not from them, that they were a malicious attempt to proliferate a virus and should be deleted. |
|
26 Jul 02 - 12:52 PM (#755027) Subject: RE: Caution: new outbreak of computer worm From: MMario one of the reasons people keep saying "Don't use Outlook" is that not only is MS Outlook "targeted" by creators of viruses; but there are a lot of "hooks" available in Outlook that ALLOW the viruses to a) infect you in the first place and b) spread like wildfire. The worst part is - SOME of those hooks are active even if you do not USE the program but if you have it installed on the machine!!!! (and NOT having Outlook installed is difficult - because MS has done it's best to build it into the operating system. Outlook in one form or another is installed by default with a number of different MS products. (sometimes without even giving you an option to not install it.) |
|
26 Jul 02 - 02:49 PM (#755073) Subject: RE: Caution: new outbreak of computer worm From: JohnInKansas MMario - There is no particular problem - or unusual difficulty in uninstalling Outlook or Outlook Express on any Windows machine I've seen. Just open add/remove programs in the control panel and click on them. What can't be uninstalled is Internet Explorer - because it is intimately a part of Windows. You can uninstall a version of IE, but it will default back to some version (usually IE 5.0), since much of Windows uses the "hooks and handles" contained in IE. Additional confusion comes from MSN Explorer, which is a separate program from Internet Explorer (neither of which, of course is the same thing as Windows Explorer). Mickey does seem to have a limited vocabulary. Several of the "later" versions of MSN Explorer replace portions of IE in a way that makes it virtually impossible to "go back" to an earlier version, or to revert to "plain vanilla" IE. Some new "internet" features in MSNE are so tightly linked to "Windows" features that are replaced by the MSNE installation, that it's probably reformat time if you don't like what MSNE does. (And they won't tell you what it does until you've installed it.) The majority of the "bugs" that are most frequently cited can be eliminated by getting current upgrades - sort of like downloading the latest V-sigs. If you haven't logged in and downloaded the latest security upgrades for IE, Outlook, OE, and Windows itself, you are just as (foolishly) vulnerable as those who ignore the need for AV programs with current signature files. John |
|
26 Jul 02 - 03:32 PM (#755098) Subject: RE: Caution: new outbreak of computer worm From: katlaughing Have any of you tried the new machines being sold through WalMart? I think they are called "Lintels" and are Linux based, under $300 for the hard drive, etc. Made by a company which wants to offer an alternative to MS etc. Absolutely no Windows stuff of any kind. |
|
27 Jan 04 - 01:41 PM (#1102698) Subject: RE: Caution: new outbreak of computer worm From: Stilly River Sage Yesterday my university was clobbered by this latest worm. It does the typical thing, it "spoofs" addresses by taking recently used addresses in the infected computer and remailing itself. This is the alert sent out this morning:
Virus Characteristics: This is a mass-mailing worm that arrives in an email message as follows: From: (spoofed) Subject: (any of the following) * Error * Status * Server Report * Mail Transaction Failed * Mail Delivery System * Hello or Hi Message Body: (any of the following) * The message contains Unicode characters and has been sent as a binary attachment. * The message cannot be represented in 7-bit ASCII encoding and has been sent as a binary attachment. * Mail transaction failed. Partial message is available. * test Attachment: (varies [.exe, .pif, .cmd, .scr] - often arrives in a ZIP archive) (22,528 bytes) Examples (common names, but can be random) * doc.bat * document.zip * message.zip * readme.zip * text.pif * hello.cmd * body.scr * test.htm.pif * data.txt.exe * file.scr * deleted.txt ****Also, please check your Virus Definition Files. You can, as usual, visit Symantec and read all about it. SRS |
|
27 Jan 04 - 03:22 PM (#1102767) Subject: RE: Caution: new outbreak of computer worm From: George Seto - af221@chebucto.ns.ca Yeah. Had a lot of those today! Figured that's what it was. Thanks for the confirmation. |
|
27 Jan 04 - 06:29 PM (#1102901) Subject: RE: Caution: new outbreak of computer worm From: Crane Driver Not seen any of these. I use AOL8, which despite many faults, does claim to filter out a lot of viruses. Then I have Norton AV, but it hasn't had anything to do recently. Mind you, I just delete anything from any address I don't know, especially if I can't pronounce it either. Maybe none of these viruses think I'm worth infecting? Paranoia rules! Andrew |
|
27 Jan 04 - 07:03 PM (#1102931) Subject: RE: Caution: new outbreak of computer worm From: Stilly River Sage I was peppered with them yesterday, but they had the look from the very beginning of malignant little worms. With the first one, to confirm my suspicion, I called the Dean of Engineering and asked if he had really sent me a post with the subject "Hi!" He laughed, said it sounded like he was on someone's list, and we both went back to deleting the oddball junk from our mailboxes. SRS |
|
27 Jan 04 - 07:24 PM (#1102959) Subject: RE: Caution: new outbreak of computer worm From: Burke I've gotten a couple of returned mail messages that had the virus attached today. I guess some infected machine out there is sending the messages as FROM: me, but the TO: address is bad. This is the first time I've had this happen. |