The Register® — Biting the hand that feeds IT

Klez worm infects and infuriates

Here we go again

Free whitepaper – Securing your online data transfer with SSL

A fresh variant of the Klez worm is spreading across the Internet this afternoon.

Klez-H, which antivirus vendors rate as a moderate risk, is capable of spreading by either email or network shares. The worm comes bundled with the ElKern virus, which tries to infect all executable files in the "Program Files" folder. It also attempts to disable on-access virus scanners, among its other tricks.

On infected machines, the worm sends an email message containing an infected attachment to email addresses harvested from the Windows address book, ICQ database, or local files. The subject line, message bodies, and attachment file names are random.

Russian virus fighters Kaspersky Labs report that Klez-H has "already resulting in numerous computer infections in many countries including Japan, China, Austria and the Czech Republic". Managed services firm, MessageLabs, which scans its users email for viruses, reports blocking thousands of copies of the bug.

Users are advised to update their antivirus software and delete any suspicious emails without opening them. ®

Free whitepaper – Certify your software integrity with Thawte code signing certificates

Don’t Miss

HandcuffsFeds: Hospital hacker's 'massive' DDoS averted

Arrest foils 'Devil's Day' scheme

thumbs down teaser 75Buggy 'smart meters' open door to power-grid botnet

Grid-burrowing worm only the beginning

MicrosoftMicrosoft knew of nasty IE bug a year before attacks

Security delayed or security denied?

BlockMaster SafeStickBlockMaster SafeStick hardware-encrypted USB drive

Review Tough enough?