SI
SI
discoversearch

We've detected that you're using an ad content blocking browser plug-in or feature. Ads provide a critical source of revenue to the continued operation of Silicon Investor.  We ask that you disable ad blocking while on Silicon Investor in the best interests of our community.  If you are not using an ad blocker but are still receiving this message, make sure your browser's tracking protection is set to the 'standard' level.
Technology Stocks : Advanced Micro Devices - Moderated (AMD)
AMD 215.32-0.2%Dec 30 3:59 PM EST

 Public ReplyPrvt ReplyMark as Last ReadFilePrevious 10Next 10PreviousNext  
To: tejek who wrote (80777)5/27/2002 3:47:48 PM
From: ptannerRead Replies (1) of 275872
 
ted, re: your virus

It is a worm. As someone else noted, there is are several variants of the W32.Klez worm going around these days. I seem to get a couple per week and one of my mailing lists gets it daily. From my observations it doesn't work in Netscape mail as NAV notes it and kills it from the AOL spam.

A partial description from Symantec:

When this worm is executed, it does the following:

It copies itself to \%System%\Wink<random characters>.exe.

NOTE: %System% is a variable. The worm locates the Windows System folder (by default this is
C:\Windows\System or C:\Winnt\System32) and copies itself to that location.


Full description: securityresponse.symantec.com@mm.html

Farther down the page is a link to a removal tool and also a note that NAV will not start after the worm has activated.

-PT
Report TOU ViolationShare This Post
 Public ReplyPrvt ReplyMark as Last ReadFilePrevious 10Next 10PreviousNext