Computing.Net > Forums > Security and Virus > w32.klez.h@mm

Computer Problems? Computing.Net has over 1,000,000 posts about all things technology related! Over 90% answered within 24 hours! Click here to start participating now! Also, be sure to check out the New User Guide.

w32.klez.h@mm

Reply to Message Icon

Name: Judy
Date: October 2, 2002 at 18:08:49 Pacific
OS: windows 98
CPU/Ram: amd-k6 3d proc, 124mb ram
Comment:

For the past two weeks I've been getting weird e-mails like the one below. I never sent an e-mail to that person. Furthermore, I RARELY open any attachments even from people I know. Someone suggested that I might have the virus mentioned. I went to Microsoft and downloaded a program to identify and remove all forms of the virus w32.klez.h@mm. However, the program did NOT identify the virus. What do you think is going on??????? Please help. I should mention that I have NOT received any e-mails from people I know indicating that they got a virus from me. Also, I'm running Win 98.


\This message has been processed by Brightma
il(TM) Anti-Virus using Symantec's Norton AntiVirus Technology.

HTTP.scr was infected with the malicious virus W32.Klez.H@mm, but was unable to be cleaned, and has been removed.

For more information on anti-virus tips and technology, visit
http://www.brightmail.com/antivirus .

The original message was received at Wed, 2 Oct 2002 15:54:51 -0400 (EDT)
from smtp.comcast.net [24.153.64.2]


*** ATTENTION ***

Your e-mail is being returned to you because there was a problem with its
delivery. The address which was undeliverable is listed in the section
labeled: "----- The following addresses had permanent fatal errors -----".

The reason your mail is being returned to you is listed in the section
labeled: "----- Transcript of Session Follows -----".

The line beginning with "

----- Transcript of session follows -----
... while talking to air-xc05.mail.aol.com.:
>>> RCPT To:
... User unknown

----------------------


This message has been processed by Brightmail(TM) Anti-Virus using
Symantec's Norton AntiVirus Technology.

HTTP.scr was infected with the malicious virus W32.Klez.H@mm, but was unable to be cleaned, and has been removed.

For more information on anti-virus tips and technology, visit
http://www.brightmail.com/antivirus .




Sponsored Link
Ads by Google

Response Number 1
Name: capt
Date: October 2, 2002 at 19:20:38 Pacific
Reply:

Your address is being spoofed by the Klez. This is one of the ways that the virus tries to spread itself. Someone who had your address was probably infected and the chain continues. Since your attempts to insure your system is clean by using your antivirus program, and other steps tell you there is no infection, you should feel secure. I get them all the time. Just do not get curious, just delete them! Take care!


0

Response Number 2
Name: TheKid
Date: October 2, 2002 at 21:09:12 Pacific
Reply:

The capt knows...as he knows I do.I get several one day,none for several days,and several more the next day.Just delete 'em.Look for e-mails that are in the range of 100k to about 175k...usually a tell-tale sign that it's the klez....



0

Response Number 3
Name: Thecla St. Romain
Date: November 11, 2002 at 07:11:46 Pacific
Reply:

How do I protect my computer from or check if I have w32.klez.h@mm?


0

Sponsored Link
Ads by Google
Reply to Message Icon

Related Posts

See More







Post Locked

This post is quite old and has been locked from receiving new replies. Please create a new posting instead.


Go to Security and Virus Forum Home


Sponsored links

Ads by Google


Results for: w32.klez.h@mm

W32.Klez.H@mm www.computing.net/answers/security/w32klezhmm/2009.html

W32.Klez.H@,mm www.computing.net/answers/security/w32klezhmm/1474.html

HELP!! Klez.H@mm Virus Attack!!! www.computing.net/answers/security/help-klezhmm-virus-attack/3419.html