KLEZ virus

[Fred]

There's a new virus out that seems to be hitting pretty widespread. My Norton's had not been updated in a while and it slipped through. If anyone happens to get hit with it, the link to a patch is http://securityresponse.symantec.com/avcenter/venc/data/w32.klez.removal.tool.html
After you download the patch, you have to reboot your computer in safe mode and run the program for it to remove the virus/worm. I thought I was finally safe from virus' since I never open exe files but all I did was hit my Outlook Express box to check mail and BOOM! I was hit. (Fred went to Best Buy and updated Norton's soon after!)

 

[mathmajors]

Um, Fred, this one's been out a while, but it's good info anyways.

What your blurb didn't say is that after running the tool, reinstall your antivirus software. The virus attacks applications.

 

[Fred]

Originally posted by mathmajors
Um, Fred, this one's been out a while, but it's good info anyways.

Correction: There is an old virus back with a vendetta!

 

[mathmajors]

Originally posted by Fred
Correction: There is an old virus back with a vendetta!

Ah.

 

[Couz]

Our amoryusa.com mail server was hit with this over the weekend. It might be old but it's making the rounds again. Everybody would be wise to update their definitions just in case.

 

[mramailman]

Hey Couz.... I just ran that Klex removal file and nothing was found.

 

[Couz]

Originally posted by mramailman
Hey Couz.... I just ran that Klex removal file and nothing was found.

Good deal. You need to make sure that you upgrade your definitions. Or did Walter shoot you a copy?

 

[mathmajors]

If you're using Microsoft IIS, you need to make sure all security fixes are up to date too.

 

[Couz]

Originally posted by mathmajors
If you're using Microsoft IIS, you need to make sure all security fixes are up to date too.

Emphasis on this. We got bit here are work because the fixes were not up to date.

 

[mathmajors]

Go to Microsoft and get the Microsoft Base Security Analyzer. It covers more than the Windows Update, including more fixes, and and IIS analysis.

And the Win2000 or NT lockdown tool too. Good stuff.