It's going to my tgeweb.com address, which means that it's being sent by someone who's visited Ironworks. Some of you guys might be getting sent it as well - I've received it 10 times in the last 2 hours (but my antivirus has killed it each time).

Get updates to your virus definitions, and scan bigtime! This one's annoying... :mad:

Anti... virus... ?

Haven't heard of this one, what does this particular one do??

Thanks for the warning Memnoch.Just started to scan.

And for all those without antivirus:a virus can get to YOUR
computer as well.Get protection!

Thanks for the advice - scanning in progress

Although I'm not sure it would get past my firewall

But better safe than soory

Thanks for the heads-up, Memmy. I always delete anything that I don't expect. What does it show as? (Hmm, who do I know that's been banned lately?)

Firewalls are annoying, conflict with hosting games too much. Where could I download a free Anti-Virus program?

Here...

<font color="silver">
W32.Klez.gen@mm is a mass-mailing worm that searches the Windows address book for email addresses and sends messages to all recipients that it finds. The worm uses its own SMTP engine to send the messages.

The subject and attachment name of incoming emails is randomly chosen. The attachment will have one of the following extensions: .bat, .exe, .pif or .scr.

The worm exploits a vulnerability in Microsoft Outlook and Outlook Express in an attempt to execute itself when you open or even preview the message. Information and a patch for the vulnerability can be found at
http://www.microsoft.com/technet/sec...n/MS01-020.asp
W32.Klez.gen@mm attempts to copy itself to all network shared drives that it finds.

Depending on which variant of the worm, the worm will drop one of the following viruses:

W32.Elkern.3326
W32.Elkern.3587
W32.Elkern.4926

which will then infect the system.

Email spoofing
Some variants of this worm use a technique known as "spoofing." If it does this, it chooses at random an address that it finds on an infected computer as the "From:" address that it uses when it performs its mass-mailing routine. Numerous cases have been reported in which users of uninfected computers receive complaints that they have sent an infected message to someone else.

For example, Linda Anderson is using a computer that is infected with W32.Klez.E@mm; Linda is not using a antivirus program or does not have current virus definitions. When W32.Klez.gen@mm performs its emailing routine, it finds the email address of Harold Logan. It inserts Harold's email address into the "From:" line of an infected email that it then sends to Janet Bishop. Janet then contacts Harold and complains that he sent her infected email, but when Harold scans his computer, Norton AntiVirus does not find anything--as would be expected--because his computer is not infected.

If you are using a current version of Norton AntiVirus, have the most recent virus definitions, and a full system scan with Norton AntiVirus set to scan all files does not find anything, you can be confident that your computer is not infected with this worm.
</font>

(Mem--I removed the '.' at the end of the URL)

[ 05-05-2002, 01:45 AM: Message edited by: Ziroc ]

Go here to get a free demo of Norton.

But seriously consider buying it yourself.could prevent a lot of trouble.

Buy? Gah, I hate buying stuff.

<font color=Orange>Mem... Does it affect Macs?</font>

[img]graemlins/jawdrop.gif[/img] wow memnoch thanks for that.I wonder whose doing it.Viruses worry me.Computer viruses to viruses that can amke you sick.Thanks dude.I hope I don't get it.

<font color="gold">I got this virus for a few days ago, and it ate up my Norton Antivirus before I found it, so I am currently browsing through the web searching for a newer version of Norton that will kill the virus.
But whoever who are sending it, :mad: !</font>

<font color=skyblue>Well, the good news is that whoever targeted your tgeweb account loves me more than you, and did not send me the virus. Does anyone else with that address have the virus?</font>

One point - a firewall dosent do anything to prevent viruses, They work by getting you to take them into the system either by using an infected file/disc or by accepting an infected email.

Memmy, I went to Microsoft but it refuses to install 'cause I keep requesting the wrong one. How can I tell what version of Microsoft Internet Explorer I have?

I am a bit confused here. I have very little knowledge about viruses, worms and stuff and Memnochs explaination is.. uumm .. well "abracadabra" to me :D No seriously; I can understand a little of it, but what I want to know is: Does someone send these viruses ON PURPOSE or could it be someone whose computer is infected with the virus but he or she doesn't know about this. And who is visiting IW and therebye accidently sending these viruses? I mean could it be me? *looks around very, very innocently* I had my dad scan our computer and he said nothing was wrong so I hope I am not the one who's causing the problem.

Please respond guys, I really want to know.

<font color=Orange>Oh if you had a virus you'd know. Verry fast.</font>

TO begin with, someone (who does not deserve to continue living on this planet) writes a virus, usualy just to get some kick out of causing misery.

From then on it propogates itself through whatever means its been designed to. In times past this meant getting onto a disc or other portable media, but recent viruses use the 'net which has a chance of reaching every vulnerable computer on the planet. Usualy even the author of the virus does not have the capability of stopping it.

If your dad says the computer is clean then, as long as he is using an up to date scanner with up to date definitions, then it should be. New viruses constantly appear though, so keep it up to date.

@Galadria: go to help->about and itll give you the version.

Ok thanx very much guys *whipes sweat off forehead* I am really glad that it isn't me [img]smile.gif[/img] So Memnoch is the virus still being send at you or has it stopped?

Heres the Info on this particular virus, it touts itself as a virus-fix.

Please read the following because it is no time to say - it will not happen to me!
Look out! No matter what any body is saying or writing - we are under attack from the Klez.E virus
We are suffering about six hits a day and it is rising. Some of the sites that we monitor are over 15 a day!
The latest trick is to send you an email from some one you may, or may not know, with the following text..
Subject : Worm Klez.E immunity
Klez.E is the most common world-wide spreading worm.It's very dangerous by corrupting your files.
Because of its very smart stealth and anti-anti-virus technic,most common AV software can't detect or clean it.
We developed this free immunity tool to defeat the malicious virus.
You only need to run this tool once,and then Klez will never come into your PC.
NOTE: Because this tool acts as a fake Klez to fool the real worm,some AV monitor maybe cry when you run it.
If so,Ignore the warning,and select 'continue'.
If you have any question,please mail to me
If you hit the "mail to me" you are in deep S*#*#
McAfee will pick it up and do it's best to kill it.
Please notice that there are no spaces after the "," in the text!
The best rule of safe "email transaction" is - if you suspect or do not the sender - DELETE IT

All the best and be aware.

btw if anyone has mcafee and wants latest DAT update I can send it to them...

I've been hit with this virus twice in the last week and it's a &%##%@* pain. There was some talk of a this particular strain also having an exectution date so will keep y'all posted if I hear anymore.

As for free Virus Checkers, AVG is da bomb! check it... http://www.grisoft.com/html/us_alert.php

Well there is Panda that you can download and also some called Titanium that is free..

Go to www.download.com and wsearch for antivirus and check the free in the stats for the search..

Also, www.antivirus.com has a removal tool as well for this one.

It can bypass firewalls so better get an antivirus program since this is a mutating one. IE 6 users with upgraded Outlook should be safe, but it might be a matter of time. The virus can make mails from anyone on your maillist to anyone on the mail list so sya that for example, I can send a mail from Memnoche to Melusine from my puter and Melusine would think that Memnoche send the mail. Thats one nasty bugger really, so get updated guys and ladies. I have seen some of it from our customars and it isn´t a nice one to have...

Galadria, I don't know what OS you're running, but this should work:

Click on 'Start' and go to the Program Files folder. Once this opens, go to the Accessories folder. Open the System Tools folder and click on 'System Information'

<font color=white>Start - Program Files - Accessories - Sytem Tools - System Information</font>

You should be able to get detailed info. on your IE version here.
__________________________

I'm one of those who has been indirectly affected by the Klez virus. Someone on campus out here became infected and the bug sent out virus laden e-mails with my address in the 'from' line.

<font color="Red">Help- About </font>

wow too bad so much human error went into this one, otherwise it would've been pefect... i just got it in my mail myself, boy this things fun to play with.. I've isolated it onto a folder on my laptop... look at that baby go... tries deleting every file and sending random important stuff somewhere over the net, which it cant... mac OSX deals with it quite well actually, lol, you can litterally watch as it navigates your hard drive seeking anything of importance :D

hehe whats really funny is how res edit recognizes it as having a binary code which has too many decimals to actually BE binary code, it carrys along with it its own programing language designed specifically for it, which is supposed to be able to cross-comunitcate with... well... windows LOL... so if you're on another platform , like linux, you have nothing to worry about :D but if you isolate it in a folder you can actually get it to do stuff with proper emmulation... hehe... Its very determined too, likes to adapt to protection software (and hardware) to try to get around eveything, I think the only type of transfer cable it can't move through is firewire :D

heh... what will they think of next... [img]tongue.gif[/img]

Could you find out the email address that has sent it to you, then maybe post it here temporarily? That way they will find out they've got it, or we can find out who it is and warn them.

I'm just a newB to the net although I've had several computers in the past(my first had 640k ram and a 20mb hard drive {1983/84}). My son "took" over our household system/s when he turned about fourteen, and although I've remained an avid RPG freak [img]graemlins/merlin.gif[/img] I've never ventured out into cyberspace before(way more scary that the worst RPG monsters). Since arriving here, I've found you "guys" to be most pleasant and far less scary than I thought you'd be.

Our systems are set to auto scan on a weekly basis but I wish to thank Memn for the heads up, and I'm right now down loading the latest definitions for Norton (system admin "usually" taken care of by son(now 16))
Checked for virus and Norton tells me that we're clean.

[img]graemlins/wizardtrouble.gif[/img]
Many, many thanks and Hi!!! to everybody

No problems with this one, but McAfee managed to trap W32/Magistr.B on my PC last night.

And the moral is..............get an anti-virus programme AND keep it up to date!!!

lol /)eath I have done that before with a really old virus, I made McAfee let go of it and then contained it, and left it there for a week. :D

<font color=Orange>Does anyone here know if it affects macs?</font>

You can also try Trends free online virus scan at Online virus scan.

<font color="crimson">With these viruses that go round, for once I am HAPPY with the service hotmail provides- it will virus check all emails you get automatically with McAffee, and if it doesnt pick up anything, our constantly updated version of Norton AntiVirus almost definately will. (we update everytime the live update thing comes up.) </font>

Open IE and click the HELP at top, choose about IE and it gives you all pertinent data. :D

Symantec has the following information:

http://securityresponse.symantec.com...ez.gen@mm.html

Yeah, I get it as well, but I get about 200 of them a DAY. It totally sucks that my filter can't ban-out *.scr | *.exe | *.pif | *.com and others.. its getting WAY to much.

I may go back to my Agent mail proggie, Outlook isn't to hot.

PS: PLEASE, everyone that has me in their address book--SCAN YOUR system with the latest virus datafiles! These MM (Mass Mailers) are so annoying!

(Mem, can you see the IP this is coming from? If so, let me know, I'll see if it's the same as one of mine)

Soon, I am moving my tgeweb.com domain to the new server, and I'll install a scanner on our mail server that will filter out all that stuff)--I wish all other ISP's and AOhell would as well, it would reduce the server loads and make the backbones MUCH faster!

Galadria, I don't know what OS you're running, but this should work:

Click on 'Start' and go to the Program Files folder. Once this opens, go to the Accessories folder. Open the System Tools folder and click on 'System Information'

<font color=white>Start - Program Files - Accessories - Sytem Tools - System Information</font>

You should be able to get detailed info. on your IE version here.
__________________________

I'm one of those who has been indirectly affected by the Klez virus. Someone on campus out here became infected and the bug sent out virus laden e-mails with my address in the 'from' line.</font>[/QUOTE]To find your IE version and info, all you need to do is:

In your browser, click 'Help' then 'About Internet Explorer'

If you have a fresh install of Internet Explorer from a Windows 98 CD, and have NOT downloaded ANY patches, and you use Outlook Express, the chances of you being infected are about 89%.

You won't even KNOW it's been run, because it can be run even if you use the 'preview message' option.

So if you have IE 5.01 or below and have never patched it, you are probably infected.

Sir Goulum

I don't think so, at my place of work we run macs and pcs linked to one server for the emails, internet etc

When the love virus came out, the pcs all had it but us in the studio using macs were unaffected.

Most of these viruses are written solely for the pc, so the mac language would not recognise them,

If someone out there can tell me different I would be really grateful, I am going to scan my Mac NOW

Lady Zidane

I have just downloaded my latest virus def supdate, it is dated 1st May 2002

Have done a thorough scan of my mac and attached discs

Thank goodness it is not me

I'm clean

Lady Zidane