Symantec Security Response has upgraded W32.Klez to a level four virus threat. W32.Klez and its variants are spreading more quickly than most viruses that Symantec Security Response has tracked.
On average, Symantec Security Response is receiving more than 3 000 submissions per day of W32.Klez and its variants. In comparison, at the peak of the Sircam virus, Symantec Security Response received approximately 1 500 submissions per day.
W32.Klez.H@mm spreads by sending itself as an attachment to e-mail addresses found in the Windows address book, the ICQ database, and local files. The e-mail arrives with a random subject line. The worm randomly chooses a file from the infected machine to send along with the worm to recipients. It spreads through network share drives and is capable of infecting files.
Additionally, the worm exploits an old vulnerability in Microsoft Outlook and Outlook Express in an attempt to execute itself when the user opens or even previews the message. Information and a patch for the vulnerability can be found at http://www.microsoft.com/technet/security/bulletin/MS01-020.asp.
Symantec Security Response recommends users update their virus definitions and Microsoft security patches to prevent infection. For detailed information and removal tool for W32.Klez, visit the Symantec Security Response Web site at http://securityresponse.symantec.com. Computer users who are concerned that they may have received a virus can easily scan their system using Symantec Security Check Web site at http://www.symantec.com/securitycheck.
Share
Symantec Security Response is a team of Internet security experts who deliver solutions, services and response capabilities to Symantec customers worldwide, 24 hours a day, seven days a week. The research centres are focused on collecting and analysing the latest malware threats such as viruses and worms, as well as network security threats and vulnerabilities.
Symantec's technical support experts provide customers with information on product implementation and usage, as well as countermeasures and identification tools for new threats. Symantec Security Response also provides time-sensitive security advisories using Web updates, alerting services, technical support and media alerts.
Symantec
Symantec, the world leader in Internet security technology, provides a broad range of content and network security software and appliance solutions to individuals, enterprises and service providers. The company is a leading provider of client, gateway and server security solutions for virus protection, firewall and virtual private network, vulnerability management, intrusion detection, Internet content and e-mail filtering, remote management technologies and security services to enterprises and service providers around the world. Symantec's Norton brand of consumer security products is a leader in worldwide retail sales and industry awards. Headquartered in Cupertino, California, Symantec has worldwide operations in 37 countries. For more information, please visit www.symantec.com.
Editorial contacts