Tonight an e-mail appeared in my box with the subject "japanese girl VS playboy" ...this is a listed Klez subject. So I'm probably infected....I didn't open it, but I had to click on it to delete it. They say that's all you have to do.
DO NOT OPEN ANY NEW E-MAILS FROM ME IF I HAVE YOUR HOME ADDRESS UNTIL FURTHER NOTICE: THE KLEZ REPRODUCES AND MAY SEND ITSELF IN MY NAME.
If you had recent e-mail correspondence with me it may be wise to do a virus scan now.
Where can you download a virus scan? I'm assuming that my computer searches for viruses, but I can't find a file. So, if you can't find a file, what can you easily do? I would think there should be something on the Net that would be easy to download.
Thanks for any advice here.
WW
WW, click on your start button>search>files and folders>and type "Wink" into the search window and see if any of your files have been converted to Wink files.
I wouldn't worry, WO'N. You've got to actively run the infected program. If you deleted any attachments came with the email you should be all right. If Keven says worry, worry, but until then don't bother.
Thanks, Faldage...I hope it's not doing the amoeba act on all my files in the meantime, though.
Dub-Dub, those Wink files can be benign files that have been downloaded with the Wink in the body, so don't get excited if you have a few...the virus scan is the only true indicator. I'm following my own hurried coaching here, sorry.
Actually W'On you were close. Try doing a search in the Registry for keys with "wink" in them. Start>Run>Regedit>Find "wink"
Here's a clip from a virus encyclopaedia:
When the attachment is executed, the worm drops a copy of itself into the System directory. It then sets up a registry key to run itself on Windows startup:
HKLM\Software\Microsoft\Windows\CurrentVersion\Run\="C:\WINDOWS\SYSTEM\"
The file name and registry value name are identical, and are randomly generated, but always begin with "Wink". For example, "Winkhj.exe".
I just downloaded McAfee last night. Took somewhere between 30 and 60 minutes--I lost track of time. It appears to be on the whole time I'm online. Do the programs like McAfee let you know when a virus is detected before you open an attachment in an email? (I ran it last night and it found thousands and thousands of files, but no viruses, which I guess is what's to be expected.)
Thanks again,
WW
If Keven says worry, worry, but until then don't bother.What happens if Keven ain't here?
or even doesn't look in here for a week or two. I was so worried about the baseball strike I... If you get the klez on Win2k version of Outlook express it'll jump all over you like a... mmm... Japaneese playboy? mmm... wet noodle? mmm... Some website servers have the *dreaded thing waiting for you to stop on by. It's much more prolific than the "I love you" virus but not nearly as *deadly... unless you pay for your net access by the minute...
One would think that a fix for this would be freely circulated around... at least as much as some of the crappy e-mails I get multiple copies of...
I have Windows ME, Keven...so?...doesn't seem to be any problems with my files so far...however, I'M STILL NOT E-MAILING, SO IF ANYONE GETS AN E-MAIL FROM ME PLEASE DON'T OPEN IT AND NOTIFY ME IMMEDIATELY HERE, BY PM, OR BY PHONE IF YOU HAVE MY #.
BTW, either OutlookExpress or Windows ME threw up a security screen so I couldn't open it (I have no delete box, I have to click on the subject to get a menu to delete)
so it wouldn't open.
>One would think that a fix for this would be freely circulated around.
There are several, most of the major AV vendors have one available. The AV app. I use, EZ AV, is made by Computer Associates, who have called their free Klez removal tool "unklez"
http://makeashorterlink.com/?K101259A1A more thorough one seems to be this one, from symantec:
http://makeashorterlink.com/?H6DC32BB
HEY, JUAN... STOP YELLING!!!!!
--------------
sjm - A *virtual savior!
HEY, JUAN... STOP YELLING!!!!! WHAT'S THAT, MUSICK? WHATT'IDYA SAY???
--SAM KINISON
what's wrong with this picture?! :-p
Klez.E is the most common world-wide spreading worm.It's very dangerous by corrupting your files. Because of its very smart stealth and anti-anti-virus technic,most common AV software can't detect or clean it. We developed this free immunity tool to defeat the malicious virus. You only need to run this tool once,and then Klez will never come into your PC. NOTE: Because this tool acts as a fake Klez to fool the real worm,some AV monitor maybe cry when you run it. If so,Ignore the warning,and select 'continue'.
If you have any question,please mail to me..
Well, that's one strategy. Like getting E.Coli and being told to stop washing your hands to get rid of it, really.
Your prognosis is terminal but we've got the only medicine that will help.
(oh, great...anybody seen Godot, yet?)
The worm can also send a message with the Subject:
“Worm Klez.E immunity”
and the message body:
“Klez.E is the most common world-wide spreading worm.It's very dangerous by corrupting your files. Because of its very smart stealth and anti-anti-virus technic,most common AV software can't detect or clean it. We developed this free immunity tool to defeat the malicious virus. You only need to run this tool once,and then Klez will never come into your PC. NOTE: Because this tool acts as a fake Klez to fool the real worm,some AV monitor maybe cry when you run it. If so,Ignore the warning,and select 'continue'. If you have any question,please mail to me."
I ain't no Klez! Mail channels are re-opened. So if you get an e-mail from me please open it.
if you get an e-mail from me please open it.We-ell, I'll think about it...
Send 'em on--you know I love you!