Symantec WARNS of a computer worm: W32.Klez.e@mm

Symantec has upgraded the threat level of W32.Klez.e@mm, a mass-mailing worm that also attempts to copy itself to network shares, to level three. Symantec first had definitions for W32.Klez.e@mm since January 17, 2002 and Klez was given a level 2 rating on a scale of 1-5. Since January 17, there has been a steady increase in the number of submissions made. Globally, Symantec Security Response has received a high number of submissions with Asia Pacific representing about 9 percent of all worldwide submissions. Customers that have updated their definitions since January 17 are protected.

Date    March 07, 2002
Name :   W32.Klez.e@mm
Threat Assessment:   Upgraded to Level 3

Description    
Symantec first had definitions for W32.Klez.e@mm since January 17, 2002 and Klez was given a level 2 rating on a scale of 1-5, with 5 being the most serious.
   
W32.Klez.e@mm is a mass-mailing worm that also attempts to copy itself to network shares. It also uses random subject lines, message bodies and
attachment file names and triggers on the 6th of every second month.
   
W32.Klez.e@mm also overwrites files and creates hidden copies of the original.
   
The worm also attempts to disable some common AV products and has a payload that fills files with all zeros, which means the users will not be able to repair. Instead users will need to restore files from backup.

W32.Klez.e@mm e-mails itself out to addresses found in local files, Outlook and ICQ (a chat client that works on a proprietary network such as AOL) address books.
   
Since January 17, there has been a steady increase in the number of submissions made. Globally, Symantec Security Response has received a high number of submissions with Asia Pacific representing about 9 percent of all worldwide submissions.
   
Definitions From Symantec   Available.
   
Customers that have updated their definitions since January 17 are protected.
Symantec Security Response   Symantec Security Response is one of the industry~s largest dedicated team of virus experts. With offices located in the United States, Japan, Australia and the Netherlands, the sun never sets on Symantec Security Response. The centre~s mission is to provide swift, global responses to computer virus threats, proactively research and develop technologies that eliminate such threats and educate the public on safe computing practices. As new computer viruses appear, Symantec Security Response develops identification and detection for these viruses and provides either a repair or delete operation, thus keeping users protected against the latest virus threats
   
http://securityresponse.symantec.com.
Symantec:   Symantec, the world leader in Internet security technology, provides a broad range of content and network security software and appliance solutions to individuals, enterprises and service providers. The company is a leading provider of client, gateway and server security solutions for virus protection, firewall and virtual private network, vulnerability management, intrusion detection, Internet content and e-mail filtering, remote management technologies and security services to enterprises and service providers around the world. Symantec~s Norton brand of consumer security products is a leader in worldwide retail sales and industry awards. Headquartered in Cupertino, Calif., Symantec has worldwide operations in 38 countries.
   
For more information, please visit www.symantec.com.