W32.klez.e@mm [boodskap #61115] |
Vr, 26 April 2002 21:51 |
®Tobie©
Boodskappe: 379 Geregistreer: September 2001
Karma: 0
|
Senior Lid |
|
|
die wurm is vol trieks ná ....... maar my Norton staan vas.
luister bietjie hier.
~~~~
1. W32.klez.e@mm and W32.klez.h@mm
Is a mass-mailing email worm that also attempts to copy itself to
network shares. The worm uses random subject lines, message
bodies, and attachment file names.
The worm exploits a vulnerability in Microsoft Outlook and
Outlook Express in an attempt to execute itself when you open or
even preview the message in which it is contained. Information
and a patch for the vulnerability are available at
http://www.microsoft.com/technet/security/bulletin/MS01-020. asp
The worm attempts to disable on-access virus scanners and some
previously distributed worms (such as W32.Nimda and CodeRed) by
stopping any active processes. The worm removes the startup
registry keys used by antivirus products and deletes checksum
database files.
In addition, the worm searches the Windows address book, the ICQ
database, and local files (such as .html and text files) for
email addresses. The worm sends an email message to these
addresses with itself as an attachment. The worm contains its own
SMTP engine thus does not use outlook express to send itself out.
For more information about these two viruses, as well as removal
tools, go to Symantec's site:
http://www.symantec.com/avcenter/venc/data/w32.klez.e@mm.htm l
--
------------------------------
Luanda news / nuus
http://walk.isat.co.za
------------------------------
|
|
|
Re: W32.klez.e@mm [boodskap #61125 is 'n antwoord op boodskap #61115] |
Sa, 27 April 2002 06:43 |
TJ
Boodskappe: 723 Geregistreer: Januarie 2004
Karma: 0
|
Senior Lid |
|
|
Die vraag is eintlik hoekom keer jou IDV ("Internet Service Provider") nie
die wurms en skelms voor dit op jou rekenaar kan beland nie. Goedkoop (soms
verniet) is duurkoop of is hulle net nie gepla nie?
Artslink.co.za ISP www.artslink.co.za/isp doen dit:
"E-mail AntiVirus Scanning - Free
Artslink.co.za ISP e-mail service makes use of AntiVirus software. This
software resides on the Artslink.co.za ISP e-mail servers and requires no
installations or configuration on the end-user PC.
Any e-mail sent or received will be scanned for known viruses. If any are
detected they will either be repaired or the infected attachment will be
deleted. The e-mail will then continue to its intended destination. In all
instances the sender will be notified if a virus has been detected and
processed. In the case where the infected attachment has to be deleted, the
recipient will also receive notification of this."
:-)
TJ
www.artslink.co.za
|
|
|
Re: W32.klez.e@mm [boodskap #61206 is 'n antwoord op boodskap #61125] |
So, 28 April 2002 05:33 |
Vusi
Boodskappe: 2211 Geregistreer: Februarie 2001
Karma: 0
|
Senior Lid |
|
|
TJ - skakel oor na die IS-stal - Icon en/of Worldonline was die eerste IDV
om so 'n diens te verskaf.
"TJ" skryf in boodskap news:3cca4836$0$233@hades.is.co.za...
> Die vraag is eintlik hoekom keer jou IDV ("Internet Service Provider") nie
> die wurms en skelms voor dit op jou rekenaar kan beland nie. Goedkoop (soms
> verniet) is duurkoop of is hulle net nie gepla nie?
>
> Artslink.co.za ISP www.artslink.co.za/isp doen dit:
>
> "E-mail AntiVirus Scanning - Free
> Artslink.co.za ISP e-mail service makes use of AntiVirus software. This
> software resides on the Artslink.co.za ISP e-mail servers and requires no
> installations or configuration on the end-user PC.
>
> Any e-mail sent or received will be scanned for known viruses. If any are
> detected they will either be repaired or the infected attachment will be
> deleted. The e-mail will then continue to its intended destination. In all
> instances the sender will be notified if a virus has been detected and
> processed. In the case where the infected attachment has to be deleted, the
> recipient will also receive notification of this."
>
>
> :-)
>
> TJ
> www.artslink.co.za
>
|
|
|
Re: W32.klez.e@mm [boodskap #61207 is 'n antwoord op boodskap #61206] |
So, 28 April 2002 05:47 |
TJ
Boodskappe: 723 Geregistreer: Januarie 2004
Karma: 0
|
Senior Lid |
|
|
Artslink.co.za ISP (goedkoper) is in die IS-stal met AV voor ICON of WOL.
Ons toets en rol uit en dan implementeer hulle. Selfde met 128k ISDN.
:-)
TJ
www.artslink.co.za
|
|
|