|
In Reply to: Careful guys, the sender doesn't have to be..... posted by jeroen '84 745i exe on April 30, 2002 at 00:38:55:
This is the "Klez" or one of it's variants. Unlike previous viri, which would look at your Outlook address book and e-mail itself to everyone in the list, this virus first chooses someone at random, and places THEIR name as the sender. So the sender is not necessarily the infected computer. Sometimes the message goes out looking like returned e-mail.
The good news it that Norton has a fix, which you can download. The bad news it that Norton won't work after you're done. the real payload of this virus is to kill Norton scan and update.
the process to restore is timeconsuming, and you need to be very careful. At one point you'll need to reboot your machine. Actually, you need to TURN IT OFF!! If you just re-boot, you'll be re-infected.
Just had a client get it. It was the "4926" variant. Intorduced on 4/17, this client got it on 4/19, and Norton hadn't heard of it till 4/22. Took us 8 hours to clean his machines.