An e-mail virus that exploits a vulnerability in the Internet Explorer browser and executes when the message is read or previewed. Possibly originating in China, several versions of the Klez worm have been introduced since late 2001. They deposit themselves in the PC's Windows directory with a random file name and set the Registry to launch at startup. Klez searches for e-mail addresses in the infected machine, and, using its own Internet mail transmitter (SMTP engine), sends messages to those addresses with virus attachments and a variety of subject headers and body text. Thus, the same user can keep getting different Klez e-mails from the same source.
In addition, Klez grabs an e-mail address in the infected machine and turns it into the "from" address. If your PC is virus free, but you get e-mails from others saying you are constantly infecting them, those e-mails are coming from some other infected PC that has your e-mail address somewhere in the computer (address book, old message, etc.). In addition, if you keep getting returned, undeliverable messages you never sent, an infected PC is sending e-mails using your from address to recipients whose mail addresses are no longer valid. See e-mail virus.
In addition, Klez grabs an e-mail address in the infected machine and turns it into the "from" address. If your PC is virus free, but you get e-mails from others saying you are constantly infecting them, those e-mails are coming from some other infected PC that has your e-mail address somewhere in the computer (address book, old message, etc.). In addition, if you keep getting returned, undeliverable messages you never sent, an infected PC is sending e-mails using your from address to recipients whose mail addresses are no longer valid. See e-mail virus.
 | Reproduced with permission from Computer Desktop Encyclopedia. Copyright (c) 1981-2008 The Computer Language Company Inc. All rights reserved. |
Additional Resources
- Avast Virus Cleaner Tool (exe)
- Avast Virus Cleaner is a free tool that completely removes selected viruses and worms from your computer. It stops viruses that are active in memory, disinfects your files, removes virus registry and start-up items, and even deletes the virus-working files. Version 1.0.209 can handle virus families: Badtrans--Beagle aka Bagle, (A-Z,...
- Software downloads 2006-11-12
- Symantec to change consumer product launches
- Symantec to change consumer product launchesIt will cement their reputation anyway....Wow, they may as well just drop their entire Quality control Dept. too! Has anyone had an Symantec Enterprise product release major or minor that worked first time? Symantecs propensity to rush Software out after Marketing's through with it, before...
- Discussion threads 2005-07-29
- Sober worm variant shimmies
- Sober worm variant shimmiesWell that explains it!Americans English speaking folks aren't as interested in sex because we are to busy working 12-18 hour days 6 days a week to pay taxes. Sorry a little disgruntled this morning...What Operating Systems Does It Affect Again?Oh yeah....NOT LINUX!!!Microsoft Sucks.Idiotic Ballmer Quote Of The...
- Discussion threads 2004-11-19
- Malware damage for February estimated at $50 bln
- mi2g Intelligence Unit data shows that partially as a result of the growth of the MyDoom family of malware, lingering effects of Mimail, Dumaru, Sobig, Swen, Klez, Sober, Yaha, BugBear and Fizzer, and also as a result of new strains of Bagle, February 2004 has already become the worst month...
- Blog posts 2004-02-20
- Study: Linux attacks outpace Windows
- Study: Linux attacks outpace WindowsTHE PAIN IN THE OSS COMMUNITY MUST BE UNBEARABLEAll this negative news and only positive news for Microsoft must be killing them! Linux is doomed. All the security vulnerabilities and spaghetti like code will be banished forever. We should sue anyone associated with...
- Discussion threads 2004-02-20
- Antivirus feature creates a burden
- Antivirus feature creates a burdenA voice of reasonThese return addresses are about as reliable as those on spam. If they are going report anything useful, they should look at the originating IP addresses and report to their owners using something like http://spamcop.net or http://www.spamid.net.I'm emailing this...to every postmaster that...
- Discussion threads 2004-01-28
- Experts: Blame Sobig for latest spam deluge
- Experts: Blame Sobig for latest spam delugeWhos is going to foot the bill?MS should be charged for all the cost for the Internet lost bandwidth, downtimes and general unavailability of systems and services caused by these viruses. MS is making it EXTREMELY EASY for anyone with a little time in...
- Discussion threads 2003-12-09
Neighboring Terms
Premier Vendor Content Whitepapers, webcasts & resources from our Power Center Sponsors
- Video: Intel Manufacturing Methods: Unit Level Traceability Auto Strap
-
This video provides an overview of Intel's Unit Level Traceability (ULT) system, a technology developed to address the complexities that exist with the introduction of new manufacturing technologies in Assembly/Test in Intel. Video playing time is 4 minutes.
- Observe this system in action on the Intel assembly line >>
-
- Visit the ZDNet Enterprise Mobility Hub sponsored by Verizon Wireless! It has the latest news, commentary, and resources for your mobile and wireless strategy development.
- Video: How to spoof a MAC address
- Five steps to protect mobile devices anywhere, anytime
- Fetch Your E-Mail from Anywhere
- From our sponsors
-
- Push to Talk from Verizon Wireless Choose Verizon Wireless and get a Push to Talk service you can rely on. The only service that comes with the Network. Starting at $699.
-
