[pchelpers] Klez virus/worm cat #4 threat
- From: "Robert Weyer" <rweyer@xxxxxxxxx>
- To: "pchelpers" <pchelpers@xxxxxxxxxxxxx>
- Date: Sat, 27 Apr 2002 17:53:09 -0500
Content-Type: multipart/alternative;
boundary="----=_NextPart_002_01BB_01C1EE14.65057E60"
------=_NextPart_002_01BB_01C1EE14.65057E60
Content-Type: text/plain;
charset="iso-8859-1"
Content-Transfer-Encoding: quoted-printable
New York Times
http://www.nytimes.com/2002/04/27/technology/27VIRU.html?todaysheadlines
A New Risk to Computers Worldwide
By JOHN SCHWARTZ
rogue computer program that is the online equivalent of a quick-change =
artist is infecting computers around the world via e-mail and clogging =
computer networks.
The program, W32/KLEZ.H, is a "blended threat," combining elements of a =
virus, which infects machines, and a worm, which transports itself from =
machine to machine. It also tries to disable some antivirus programs.
It makes itself hard for users to spot by changing its e-mail subject =
line, message and name of the attachment at random, drawing from a =
database that includes, for example, such subject lines as "Hello, =
honey," and "A very funny website."=20
The program has grown increasingly common as users unknowingly activate =
it - sometimes without even opening the e-mail attachment that carries =
the virus - and allow it to send copies of itself to those in the =
victim's e-mail address file.
"It is exploding," said Keith Peer, chief executive of Central Command, =
a computer security company.
The rapid spread of the program caused Symantec and McAfee.com, two =
prominent computer protection companies, to upgrade their warnings about =
it in recent days; Symantec said on its Web site that it now considered =
the program a "category 4" risk, its second-highest ranking.
The program exploits vulnerable spots in computer programs, most notably =
a problem in earlier versions of Microsoft's mail programs, Outlook and =
Outlook Express, which allows some types of computer programs to be =
activated even if they are in the "preview pane."=20
=20
=20
=20
=20
=20
=20
Topics =20
Alerts =20
=20
Computer Security =20
=20
Electronic Mail =20
=20
Computers and the Internet =20
=20
McAfee.com Corporation =20
=20
Create Your Own | Manage Alerts
Take a Tour =20
=20
=20
=20
Sign Up for Newsletters =20
=20
=20
=20
=20
=20
Get Stock Quotes
Look Up Symbols=20
=20
=20
=20
Portfolio | Company Research
U.S. Markets | Int. Markets
Mutual Funds | Bank Rates
Commodities & Currencies =20
=20
=20
=20
=20
=20
=20
=20
The program can also grab files randomly from victims' hard drives and =
send them out, but it does little damage to the machines themselves, =
antivirus companies said.
Microsoft has had patches available to fix these problems for more than =
a year, but many people do not keep their software up to date, said =
Vincent Weafer, the director of research at Symantec Security Response.
Although most antivirus software programs already provided protection =
against the Klez family, the new variant has enough new wrinkles to =
trick some of the digital sentries. The latest versions of software have =
been updated to block the worm, and the companies offer free online =
tools to cleanse infected machines.
---
Outgoing mail is certified Virus Free.
Checked by AVG anti-virus system (http://www.grisoft.com).
Version: 6.0.350 / Virus Database: 196 - Release Date: 4/17/2002
------=_NextPart_002_01BB_01C1EE14.65057E60
Content-Type: text/html;
charset="iso-8859-1"
Content-Transfer-Encoding: quoted-printable
<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN">
<HTML><HEAD>
<META content=3D"text/html; charset=3Diso-8859-1" =
http-equiv=3DContent-Type>
<META content=3D"MSHTML 5.00.2722.2800" name=3DGENERATOR>
<STYLE></STYLE>
</HEAD>
<BODY bgColor=3D#ffffff>
<DIV><FONT face=3DArial size=3D3>
<P><FONT size=3D3>New York Times</FONT></P>
<P><A=20
href=3D"http://www.nytimes.com/2002/04/27/technology/27VIRU.html?todayshe=
adlines">http://www.nytimes.com/2002/04/27/technology/27VIRU.html?todaysh=
eadlines</A></P><FONT=20
size=3D3>
<H2>A New Risk to Computers Worldwide</H2>
<P></NYT_HEADLINE></P>
<P></P>
<P><NYT_BYLINE version=3D"1.0" type=3D" "></P>
<H5>By JOHN SCHWARTZ</H5>
<P></NYT_BYLINE></P>
<P></P>
<P><NYT_TEXT><FONT class=3Dtsa></P>
<P><IMG align=3Dleft alt=3DA border=3D0=20
src=3D"http://graphics.nytimes.com/images/dropcap/a.gif"> rogue computer =
program=20
that is the online equivalent of a quick-change artist is infecting =
computers=20
around the world via e-mail and clogging computer networks.</P>
<P>The program, W32/KLEZ.H, is a "blended threat," combining elements of =
a=20
virus, which infects machines, and a worm, which transports itself from =
machine=20
to machine. It also tries to disable some antivirus =
programs.</FONT></FONT></P>
<P> </P>
<P>It makes itself hard for users to spot by changing its e-mail subject =
line,=20
message and name of the attachment at random, drawing from a database =
that=20
includes, for example, such subject lines as "Hello, honey," and "A very =
funny=20
website." </P>
<P>The program has grown increasingly common as users unknowingly =
activate it —=20
sometimes without even opening the e-mail attachment that carries the =
virus —=20
and allow it to send copies of itself to those in the victim's e-mail =
address=20
file.</P>
<P>"It is exploding," said Keith Peer, chief executive of Central =
Command, a=20
computer security company.</P>
<P>The rapid spread of the program caused Symantec and <A=20
href=3D"http://www.nytimes.com/redirect/marketwatch/redirect.ctx?MW=3Dhtt=
p://custom.marketwatch.com/custom/nyt-com/html-companyprofile.asp&sym=
b=3DMCAF">McAfee.com</A>,=20
two prominent computer protection companies, to upgrade their warnings =
about it=20
in recent days; Symantec said on its Web site that it now considered the =
program=20
a "category 4" risk, its second-highest ranking.</P>
<P>The program exploits vulnerable spots in computer programs, most =
notably a=20
problem in earlier versions of <A=20
href=3D"http://www.nytimes.com/redirect/marketwatch/redirect.ctx?MW=3Dhtt=
p://custom.marketwatch.com/custom/nyt-com/html-companyprofile.asp&sym=
b=3DMSFT">Microsoft's</A>=20
mail programs, Outlook and Outlook Express, which allows some types of =
computer=20
programs to be activated even if they are in the "preview pane." </P>
<TABLE align=3Dright border=3D0 cellPadding=3D0 cellSpacing=3D0 =
width=3D195>
<TBODY>
<TR>
<TD><IMG border=3D0 height=3D1=20
src=3D"http://graphics.nytimes.com/images/misc/spacer.gif" =
width=3D9></TD></TR>
<TR>
<TD><NYT_LINKS_ONSITE version=3D"1.0" type=3D"main"><!--Error: there =
are no related articles associated with this article --><!--Error: there =
are no nyt_urls associated with this article, error # variables.errno =
-->
<TABLE align=3Dright border=3D0 cellPadding=3D0 =
cellSpacing=3D0><!---->
<TBODY>
<TR>
<TD rowSpan=3D99 width=3D9><IMG border=3D0 height=3D1=20
src=3D"http://graphics.nytimes.com/images/misc/spacer.gif"=20
width=3D10></TD></TR><!---->
<FORM action=3D/mem/tnt.html method=3Dpost><INPUT name=3DretA =
type=3Dhidden=20
=
value=3Dhttp://www.nytimes.com/2002/04/27/technology/27VIRU.html><INPUT=20
name=3DretT type=3Dhidden value=3D"A New Risk to Computers =
Worldwide"><INPUT=20
name=3Dtopic1 type=3Dhidden value=3D"Computer Security"><INPUT=20
name=3Dtopic_field1 type=3Dhidden value=3Ddes><INPUT =
name=3Dtopic2 type=3Dhidden=20
value=3D"Electronic Mail"><INPUT name=3Dtopic_field2 =
type=3Dhidden=20
value=3Ddes><INPUT name=3Dtopic3 type=3Dhidden=20
value=3D"Computers and the Internet"><INPUT name=3Dtopic_field3 =
type=3Dhidden=20
value=3Ddes><INPUT name=3Dtopic4 type=3Dhidden=20
value=3D"McAfee.com Corporation"><INPUT name=3Dtopic_field4 =
type=3Dhidden=20
value=3Dnyt_org_all><INPUT name=3Dmodule type=3Dhidden =
value=3Dcall><INPUT=20
name=3Dalert_context type=3Dhidden value=3D1>=20
<TR>
<TD colSpan=3D5>
<TABLE bgColor=3D#ffffff border=3D0 cellPadding=3D0 =
cellSpacing=3D0=20
width=3D184>
<TBODY>
<TR>
<TD colSpan=3D8><IMG border=3D0 height=3D18 hspace=3D0=20
=
src=3D"http://graphics.nytimes.com/images/membercenter/newstracker_head.g=
if"=20
width=3D184></TD></TR>
<TR>
<TD colSpan=3D8 width=3D184><IMG border=3D0 height=3D1=20
=
src=3D"http://graphics.nytimes.com/images/misc/spacer.gif"=20
width=3D1></TD></TR>
<TR>
<TD bgColor=3D#cccccc colSpan=3D8 width=3D184><IMG =
border=3D0 height=3D1=20
=
src=3D"http://graphics.nytimes.com/images/misc/spacer.gif"=20
width=3D1></TD></TR>
<TR>
<TD bgColor=3D#cccccc width=3D1><IMG border=3D0 =
height=3D1=20
=
src=3D"http://graphics.nytimes.com/images/misc/spacer.gif"=20
width=3D1></TD>
<TD width=3D5><IMG border=3D0 height=3D1=20
=
src=3D"http://graphics.nytimes.com/images/misc/spacer.gif"=20
width=3D5></TD>
<TD align=3Dleft height=3D20 vAlign=3Dcenter =
width=3D109><IMG border=3D0=20
height=3D1=20
=
src=3D"http://graphics.nytimes.com/images/misc/spacer.gif"=20
width=3D109><BR><STRONG><FONT=20
face=3D"Arial, Helvetica, sans-serif"=20
size=3D1>Topics</FONT></STRONG></TD>
<TD width=3D3><IMG border=3D0 height=3D1=20
=
src=3D"http://graphics.nytimes.com/images/misc/spacer.gif"=20
width=3D3></TD>
<TD bgColor=3D#cccccc width=3D1><IMG border=3D0 =
height=3D1=20
=
src=3D"http://graphics.nytimes.com/images/misc/spacer.gif"=20
width=3D1></TD>
<TD width=3D3><IMG border=3D0 height=3D1=20
=
src=3D"http://graphics.nytimes.com/images/misc/spacer.gif"=20
width=3D3></TD>
<TD align=3Dleft vAlign=3Dcenter width=3D61><IMG =
border=3D0 height=3D1=20
=
src=3D"http://graphics.nytimes.com/images/misc/spacer.gif"=20
width=3D61><BR><STRONG><FONT face=3D"Arial, Helvetica, =
sans-serif"=20
size=3D1> Alerts</FONT></STRONG></TD>
<TD bgColor=3D#cccccc width=3D1><IMG border=3D0 =
height=3D1=20
=
src=3D"http://graphics.nytimes.com/images/misc/spacer.gif"=20
width=3D1></TD></TR>
<TR>
<TD bgColor=3D#cccccc colSpan=3D8 width=3D184><IMG =
border=3D0 height=3D1=20
=
src=3D"http://graphics.nytimes.com/images/misc/spacer.gif"=20
width=3D1></TD></TR>
<TR>
<TD bgColor=3D#cccccc width=3D1><IMG border=3D0 =
height=3D1=20
=
src=3D"http://graphics.nytimes.com/images/misc/spacer.gif"=20
width=3D1></TD>
<TD width=3D5><IMG border=3D0 height=3D1=20
=
src=3D"http://graphics.nytimes.com/images/misc/spacer.gif"=20
width=3D5></TD>
<TD align=3Dleft height=3D20 vAlign=3Dcenter =
width=3D109><FONT=20
face=3D"Arial, Helvetica, sans-serif" =
size=3D1>Computer=20
Security</FONT></TD>
<TD width=3D3><IMG border=3D0 height=3D1=20
=
src=3D"http://graphics.nytimes.com/images/misc/spacer.gif"=20
width=3D3></TD>
<TD bgColor=3D#cccccc width=3D1><IMG border=3D0 =
height=3D1=20
=
src=3D"http://graphics.nytimes.com/images/misc/spacer.gif"=20
width=3D1></TD>
<TD width=3D3><IMG border=3D0 height=3D1=20
=
src=3D"http://graphics.nytimes.com/images/misc/spacer.gif"=20
width=3D3></TD>
<TD align=3Dmiddle vAlign=3Dcenter width=3D61><INPUT =
border=3D0=20
height=3D15 name=3Dtopic1_check=20
=
src=3D"http://graphics.nytimes.com/images/membercenter/turn_on.gif"=20
type=3Dimage value=3Dy width=3D49></TD>
<TD bgColor=3D#cccccc width=3D1><IMG border=3D0 =
height=3D1=20
=
src=3D"http://graphics.nytimes.com/images/misc/spacer.gif"=20
width=3D1></TD></TR>
<TR>
<TD bgColor=3D#cccccc colSpan=3D8 width=3D184><IMG =
border=3D0 height=3D1=20
=
src=3D"http://graphics.nytimes.com/images/misc/spacer.gif"=20
width=3D1></TD></TR>
<TR>
<TD bgColor=3D#cccccc width=3D1><IMG border=3D0 =
height=3D1=20
=
src=3D"http://graphics.nytimes.com/images/misc/spacer.gif"=20
width=3D1></TD>
<TD width=3D5><IMG border=3D0 height=3D1=20
=
src=3D"http://graphics.nytimes.com/images/misc/spacer.gif"=20
width=3D5></TD>
<TD align=3Dleft height=3D20 vAlign=3Dcenter =
width=3D109><FONT=20
face=3D"Arial, Helvetica, sans-serif" =
size=3D1>Electronic=20
Mail</FONT></TD>
<TD width=3D3><IMG border=3D0 height=3D1=20
=
src=3D"http://graphics.nytimes.com/images/misc/spacer.gif"=20
width=3D3></TD>
<TD bgColor=3D#cccccc width=3D1><IMG border=3D0 =
height=3D1=20
=
src=3D"http://graphics.nytimes.com/images/misc/spacer.gif"=20
width=3D1></TD>
<TD width=3D3><IMG border=3D0 height=3D1=20
=
src=3D"http://graphics.nytimes.com/images/misc/spacer.gif"=20
width=3D3></TD>
<TD align=3Dmiddle vAlign=3Dcenter width=3D61><INPUT =
border=3D0=20
height=3D15 name=3Dtopic2_check=20
=
src=3D"http://graphics.nytimes.com/images/membercenter/turn_on.gif"=20
type=3Dimage value=3Dy width=3D49></TD>
<TD bgColor=3D#cccccc width=3D1><IMG border=3D0 =
height=3D1=20
=
src=3D"http://graphics.nytimes.com/images/misc/spacer.gif"=20
width=3D1></TD></TR>
<TR>
<TD bgColor=3D#cccccc colSpan=3D8 width=3D184><IMG =
border=3D0 height=3D1=20
=
src=3D"http://graphics.nytimes.com/images/misc/spacer.gif"=20
width=3D1></TD></TR>
<TR>
<TD bgColor=3D#cccccc width=3D1><IMG border=3D0 =
height=3D1=20
=
src=3D"http://graphics.nytimes.com/images/misc/spacer.gif"=20
width=3D1></TD>
<TD width=3D5><IMG border=3D0 height=3D1=20
=
src=3D"http://graphics.nytimes.com/images/misc/spacer.gif"=20
width=3D5></TD>
<TD align=3Dleft height=3D20 vAlign=3Dcenter =
width=3D109><FONT=20
face=3D"Arial, Helvetica, sans-serif" =
size=3D1>Computers and the=20
Internet</FONT></TD>
<TD width=3D3><IMG border=3D0 height=3D1=20
=
src=3D"http://graphics.nytimes.com/images/misc/spacer.gif"=20
width=3D3></TD>
<TD bgColor=3D#cccccc width=3D1><IMG border=3D0 =
height=3D1=20
=
src=3D"http://graphics.nytimes.com/images/misc/spacer.gif"=20
width=3D1></TD>
<TD width=3D3><IMG border=3D0 height=3D1=20
=
src=3D"http://graphics.nytimes.com/images/misc/spacer.gif"=20
width=3D3></TD>
<TD align=3Dmiddle vAlign=3Dcenter width=3D61><INPUT =
border=3D0=20
height=3D15 name=3Dtopic3_check=20
=
src=3D"http://graphics.nytimes.com/images/membercenter/turn_on.gif"=20
type=3Dimage value=3Dy width=3D49></TD>
<TD bgColor=3D#cccccc width=3D1><IMG border=3D0 =
height=3D1=20
=
src=3D"http://graphics.nytimes.com/images/misc/spacer.gif"=20
width=3D1></TD></TR>
<TR>
<TD bgColor=3D#cccccc colSpan=3D8 width=3D184><IMG =
border=3D0 height=3D1=20
=
src=3D"http://graphics.nytimes.com/images/misc/spacer.gif"=20
width=3D1></TD></TR>
<TR>
<TD bgColor=3D#cccccc width=3D1><IMG border=3D0 =
height=3D1=20
=
src=3D"http://graphics.nytimes.com/images/misc/spacer.gif"=20
width=3D1></TD>
<TD width=3D5><IMG border=3D0 height=3D1=20
=
src=3D"http://graphics.nytimes.com/images/misc/spacer.gif"=20
width=3D5></TD>
<TD align=3Dleft height=3D20 vAlign=3Dcenter =
width=3D109><FONT=20
face=3D"Arial, Helvetica, sans-serif" =
size=3D1>McAfee.com=20
Corporation</FONT></TD>
<TD width=3D3><IMG border=3D0 height=3D1=20
=
src=3D"http://graphics.nytimes.com/images/misc/spacer.gif"=20
width=3D3></TD>
<TD bgColor=3D#cccccc width=3D1><IMG border=3D0 =
height=3D1=20
=
src=3D"http://graphics.nytimes.com/images/misc/spacer.gif"=20
width=3D1></TD>
<TD width=3D3><IMG border=3D0 height=3D1=20
=
src=3D"http://graphics.nytimes.com/images/misc/spacer.gif"=20
width=3D3></TD>
<TD align=3Dmiddle vAlign=3Dcenter width=3D61><INPUT =
border=3D0=20
height=3D15 name=3Dtopic4_check=20
=
src=3D"http://graphics.nytimes.com/images/membercenter/turn_on.gif"=20
type=3Dimage value=3Dy width=3D49></TD>
<TD bgColor=3D#cccccc width=3D1><IMG border=3D0 =
height=3D1=20
=
src=3D"http://graphics.nytimes.com/images/misc/spacer.gif"=20
width=3D1></TD></TR>
<TR>
<TD bgColor=3D#cccccc colSpan=3D8 width=3D184><IMG =
border=3D0 height=3D1=20
=
src=3D"http://graphics.nytimes.com/images/misc/spacer.gif"=20
width=3D1></TD></TR>
<TR>
<TD bgColor=3D#cccccc width=3D1><IMG border=3D0 =
height=3D1=20
=
src=3D"http://graphics.nytimes.com/images/misc/spacer.gif"=20
width=3D1></TD>
<TD align=3Dmiddle colSpan=3D6 height=3D20 =
vAlign=3Dcenter=20
width=3D182><FONT face=3D"Arial, Helvetica, =
sans-serif" size=3D1><A=20
=
href=3D"http://www.nytimes.com/mem/tnt.html?module=3Dcall&alert_conte=
xt=3D0&retA=3Dhttp://www.nytimes.com/2002/04/27/technology/27VIRU.htm=
l&retT=3DA+New+Risk+to+Computers+Worldwide">Create=20
Your Own</A></FONT> | <FONT=20
face=3D"Arial, Helvetica, sans-serif" size=3D1><A=20
=
href=3D"http://www.nytimes.com/mem/tnt.html?module=3Dmanage&retA=3Dht=
tp://www.nytimes.com/2002/04/27/technology/27VIRU.html&retT=3DA+New+R=
isk+to+Computers+Worldwide">Manage=20
Alerts</A></FONT><BR><FONT face=3D"Arial, Helvetica, =
sans-serif"=20
size=3D1><A=20
=
href=3D"http://www.nytimes.com/ads/marketing/newstracker/index.html">Take=
=20
a Tour</A> </FONT></TD>
<TD bgColor=3D#cccccc width=3D1><IMG border=3D0 =
height=3D1=20
=
src=3D"http://graphics.nytimes.com/images/misc/spacer.gif"=20
width=3D1></TD></TR>
<TR>
<TD bgColor=3D#cccccc colSpan=3D8 width=3D184><IMG =
border=3D0 height=3D1=20
=
src=3D"http://graphics.nytimes.com/images/misc/spacer.gif"=20
width=3D1></TD></TR></TBODY></TABLE>
<TABLE bgColor=3D#ffffff border=3D0 cellPadding=3D0 =
cellSpacing=3D0=20
width=3D184>
<TBODY>
<TR>
<TD bgColor=3D#ffffff colSpan=3D3 width=3D184><IMG =
border=3D0 height=3D2=20
=
src=3D"http://graphics.nytimes.com/images/misc/spacer.gif"=20
width=3D1></TD></TR>
<TR>
<TD bgColor=3D#cccccc colSpan=3D3 width=3D184><IMG =
border=3D0 height=3D1=20
=
src=3D"http://graphics.nytimes.com/images/misc/spacer.gif"=20
width=3D1></TD></TR>
<TR>
<TD bgColor=3D#cccccc width=3D1><IMG border=3D0 =
height=3D1=20
=
src=3D"http://graphics.nytimes.com/images/misc/spacer.gif"=20
width=3D1></TD>
<TD align=3Dmiddle height=3D20 vAlign=3Dcenter =
width=3D182><A=20
href=3D"http://email.nytimes.com/"><FONT=20
face=3D"Arial, Helvetica, sans-serif" size=3D2>Sign Up =
for=20
Newsletters</FONT></A></TD>
<TD bgColor=3D#cccccc width=3D1></TD></TR>
<TR>
<TD bgColor=3D#cccccc colSpan=3D3 width=3D184><IMG =
border=3D0 height=3D1=20
=
src=3D"http://graphics.nytimes.com/images/misc/spacer.gif"=20
width=3D1></TD></TR></TBODY></TABLE></TD></TR></FORM>
<TR>
<TD colSpan=3D5><IMG align=3Dcenter alt=3D"Other Resources" =
border=3D0=20
height=3D22=20
=
src=3D"http://graphics.nytimes.com/images/article/new_otherResources.gif"=
=20
width=3D184></TD></TR>
<TR>
<TD bgColor=3D#cccccc height=3D1 width=3D1><IMG border=3D0 =
height=3D1=20
src=3D"http://graphics.nytimes.com/images/misc/spacer.gif" =
width=3D1></TD>
<TD bgColor=3D#cccccc width=3D5><IMG border=3D0 height=3D1=20
src=3D"http://graphics.nytimes.com/images/misc/spacer.gif" =
width=3D5></TD>
<TD bgColor=3D#cccccc width=3D172><IMG border=3D0 height=3D1=20
src=3D"http://graphics.nytimes.com/images/misc/spacer.gif"=20
width=3D172></TD>
<TD bgColor=3D#cccccc width=3D5><IMG border=3D0 height=3D1=20
src=3D"http://graphics.nytimes.com/images/misc/spacer.gif" =
width=3D5></TD>
<TD bgColor=3D#cccccc width=3D1><IMG border=3D0 height=3D1=20
src=3D"http://graphics.nytimes.com/images/misc/spacer.gif"=20
width=3D1></TD></TR>
<TR>
<TD bgColor=3D#cccccc width=3D1><IMG border=3D0 height=3D1=20
src=3D"http://graphics.nytimes.com/images/misc/spacer.gif" =
width=3D1></TD>
<TD colSpan=3D3 width=3D182>
<FORM action=3D/redirect/marketwatch/redirect.ctx =
method=3Dget=20
name=3Dgetquotes><INPUT name=3DMW type=3Dhidden=20
=
value=3Dhttp://marketwatch.nytimes.com/custom/nyt-com/html-companyprofile=
.asp>=20
<TABLE border=3D0 cellPadding=3D0 cellSpacing=3D0 =
width=3D182>
<TBODY>
<TR>
<TD rowSpan=3D8 width=3D5><IMG border=3D0 height=3D1=20
=
src=3D"http://graphics.nytimes.com/images/misc/spacer.gif"=20
width=3D5></TD>
<TD height=3D8 width=3D172><IMG border=3D0 height=3D8=20
=
src=3D"http://graphics.nytimes.com/images/misc/spacer.gif"=20
width=3D172></TD>
<TD rowSpan=3D8 width=3D5><IMG border=3D0 height=3D1=20
=
src=3D"http://graphics.nytimes.com/images/misc/spacer.gif"=20
width=3D5></TD></TR>
<TR>
<TD align=3Dleft width=3D172><FONT color=3D#000000=20
face=3D"Times New Roman,Times,Bookman Old =
Style,Garamond"=20
size=3D-1>Get Stock Quotes<BR><A=20
=
href=3D"http://www.nytimes.com/redirect/marketwatch/redirect.ctx?MW=3Dhtt=
p://marketwatch.nytimes.com/custom/nyt-com/html-companyprofile.asp">Look =
Up Symbols</A></FONT></TD></TR>
<TR>
<TD width=3D172><IMG border=3D0 height=3D5=20
=
src=3D"http://graphics.nytimes.com/images/misc/spacer.gif"=20
width=3D1></TD></TR>
<TR>
<TD align=3Dleft width=3D172><INPUT name=3Dsymb =
size=3D15> <INPUT=20
align=3Dtop alt=3DSubmit border=3D0 height=3D19=20
=
src=3D"http://graphics.nytimes.com/images/article/formArrow.gif"=20
type=3Dimage vspace=3D3 width=3D18></TD></TR>
<TR>
<TD width=3D172><IMG border=3D0 height=3D5=20
=
src=3D"http://graphics.nytimes.com/images/misc/spacer.gif"=20
width=3D1></TD></TR>
<TR>
<TD align=3Dleft width=3D172><FONT color=3D#000000=20
face=3D"Times New Roman,Times,Bookman Old =
Style,Garamond"=20
size=3D-2><A=20
=
href=3D"http://www.nytimes.com/redirect/marketwatch/redirect.ctx?MW=3Dhtt=
p://marketwatch.nytimes.com/custom/nyt-com/portfolio/view.asp">Portfolio<=
/A> | =20
<A=20
=
href=3D"http://www.nytimes.com/redirect/marketwatch/redirect.ctx?MW=3Dhtt=
p://marketwatch.nytimes.com/custom/nyt-com/html-companyprofile.asp">Compa=
ny=20
Research</A><BR><A=20
=
href=3D"http://www.nytimes.com/redirect/marketwatch/redirect.ctx?MW=3Dhtt=
p://marketwatch.nytimes.com//custom/nyt-com/html-usmarkets.asp">U.S.=20
Markets</A> | <A=20
=
href=3D"http://www.nytimes.com/redirect/marketwatch/redirect.ctx?MW=3Dhtt=
p://marketwatch.nytimes.com/custom/nyt-com/html-intlmarkets.asp">Int.=20
Markets</A><BR><A=20
=
href=3D"http://www.nytimes.com/redirect/marketwatch/redirect.ctx?MW=3Dhtt=
p://marketwatch.nytimes.com/custom/nyt-com/html-fundfinder.asp">Mutual=20
Funds</A> | <A=20
href=3D"http://www.nytimes.com/partners/banking/">Bank =
Rates</A><BR><A=20
=
href=3D"http://www.nytimes.com/redirect/marketwatch/redirect.ctx?MW=3Dhtt=
p://marketwatch.nytimes.com/custom/nyt-com/html-currencies.asp">Commoditi=
es=20
& Currencies</A></FONT> </TD></TR>
<TR>
<TD height=3D8><IMG border=3D0 height=3D8=20
=
src=3D"http://graphics.nytimes.com/images/misc/spacer.gif"=20
width=3D1></TD></TR></TBODY></TABLE></FORM></TD>
<TD bgColor=3D#cccccc width=3D1><IMG border=3D0 height=3D1=20
src=3D"http://graphics.nytimes.com/images/misc/spacer.gif"=20
width=3D1></TD></TR>
<TR>
<TD bgColor=3D#cccccc colSpan=3D5 height=3D1 width=3D184><IMG =
border=3D0=20
height=3D1 =
src=3D"http://graphics.nytimes.com/images/misc/spacer.gif"=20
width=3D1></TD></TR>
<TR>
<TD colSpan=3D5><!-- context ad reference "Middle5" =
--><!--nytstore-cont--><IMG=20
height=3D21 =
src=3D"http://graphics4.nytimes.com/ads/nytstore.gif"=20
=
width=3D184><BR></TD></TR></TBODY></TABLE><!----></NYT_LINKS_ONSITE></TD>=
</TR>
<TR>
<TD><IMG border=3D0 height=3D1=20
src=3D"http://graphics.nytimes.com/images/misc/spacer.gif" =
width=3D9></TD>
<TR>
<TD=20
align=3Dright><!-- context ad reference "Frame3" =
--><BR></TD></TR></TBODY></TABLE>
<P>The program can also grab files randomly from victims' hard drives =
and send=20
them out, but it does little damage to the machines themselves, =
antivirus=20
companies said.</P>
<P>Microsoft has had patches available to fix these problems for more =
than a=20
year, but many people do not keep their software up to date, said =
Vincent=20
Weafer, the director of research at Symantec Security Response.</P>
<P>Although most antivirus software programs already provided protection =
against=20
the Klez family, the new variant has enough new wrinkles to trick some =
of the=20
digital sentries. The latest versions of software have been updated to =
block the=20
worm, and <FONT size=3D3>the companies offer free online tools to =
cleanse infected=20
machines.</NYT_TEXT><BR clear=3Dall></P><!--plsfield:NYT_FOOTER--><FONT=20
size=3D3></FONT></FONT></FONT></DIV>
<DIV> </DIV>
<DIV><FONT face=3DArial size=3D3><FONT size=3D3><FONT =
size=3D3><BR>---<BR>Outgoing mail=20
is certified Virus Free.<BR>Checked by AVG anti-virus system (<A=20
href=3D"http://www.grisoft.com">http://www.grisoft.com</A>).<BR>Version: =
6.0.350 /=20
Virus Database: 196 - Release Date:=20
4/17/2002</FONT></FONT></FONT></DIV></BODY></HTML>
------=_NextPart_002_01BB_01C1EE14.65057E60--
-- Binary/unsupported file stripped by Ecartis --
-- Type: image/gif
-- File: a.gif
-- Binary/unsupported file stripped by Ecartis --
-- Type: image/gif
-- File: spacer.gif
-- Binary/unsupported file stripped by Ecartis --
-- Type: image/gif
-- File: newstracker_head.gif
-- Binary/unsupported file stripped by Ecartis --
-- Type: image/gif
-- File: new_otherResources.gif
-- Binary/unsupported file stripped by Ecartis --
-- Type: image/gif
-- File: nytstore.gif
-- Binary/unsupported file stripped by Ecartis --
-- Type: text/x-vcard
-- File: Robert Weyer.vcf
- Follow-Ups:
- [pchelpers] Re: Klez virus/worm cat #4 threat
- From: Jackie MacWhirter
Other related posts:
- » [pchelpers] Klez virus/worm cat #4 threat
- » [pchelpers] Re: Klez virus/worm cat #4 threat
- [pchelpers] Re: Klez virus/worm cat #4 threat
- From: Jackie MacWhirter