Slashdot Mirror

← Back to Stories (view on slashdot.org)

Virus Piggybacks Microsoft Mail Worm

Posted by ryuzaki0 on from the you-can't-make-this-stuff-up dept.

metacell writes "A virus (a version of the Chernobyl virus) infects an email worm executable (the Klez worm), and is spread along with it. " It's a damn good *delete* thing that Microsoft has been *delete* spending the last few weeks doing a *delete* security audit *delete* of all of *delete* ah never mind. My wrist hurts from deleting over a meg of mail worm viruses a day.

14 of 534 comments (clear)

  1. Solution by Chardish · · Score: 5, Interesting

    Hmm, maybe Microsoft could just disable scripts in their email software? That sounds like a good option.

    No one uses Outlook macros anyway, except worm writers. It's common sense that I don't want any software, not just viruses, automatically sending email without my consent or confirmation (or even knowledge!)

  2. New Anti-Terrorism Laws put to good use? by 11thangel · · Score: 5, Funny

    Since Outlook is propogating virii, it is responsible for electronic havoc. According to the new legislation, that classifies Outlook as an electronic terrorism program. Ok, so I'm dreaming, but wouldn't you love to see SWAT teams breaking down doors to sieze copies of Outlook?

    --

    I am !amused.
  3. cant belive ppl still fall for this: by rehabdoll · · Score: 5, Funny

    Just deleted this klez mail:

    Klez.E is the most common world-wide spreading worm.It's very dangerous by corrupting your files.
    Because of its very smart stealth and anti-anti-virus technic,most common AV software can't detect or clean it.
    We developed this free immunity tool to defeat the malicious virus.
    You only need to run this tool once,and then Klez will never come into your PC.
    NOTE: Because this tool acts as a fake Klez to fool the real worm,some AV monitor maybe cry when you run it.
    If so,Ignore the warning,and select 'continue'.
    If you have any question,please mail to me.


    Ofcourse, an infected file was attached with the mail..

    1. Re:cant belive ppl still fall for this: by dboyles · · Score: 5, Funny

      "NOTE: Because this tool acts as a fake Klez to fool the real worm,some AV monitor maybe cry when you run it."

      We're going to be screwed when a native English speaker decides to propagate a virus.

      "I send you this file in order to have your advice."

      --
      -- "Complacency is a far more dangerous attitude than outrage." -Naomi Littlebear
  4. Evolution for Windows by justanyone · · Score: 5, Interesting

    Why isn't there a version of Evolution for windows? It's great software - I'd pay for it if it wasn't free. And, NO VIRUSES!!!

    --
    Unitarian Church: Freethinkers Congregate!
  5. Options? by InnereNacht · · Score: 5, Interesting

    Alright. I've been in the field for some time but have never really pursued this: What other options for email clients do we HAVE besides Outlook/Outlook express in a windows environment?

    I'm pretty sure that Eudora is still around, but what is out there for windows-based, user friendly software? It'd almost be worth the switch just to avoid all these damn Outlook-friendly virii.

    1. Re:Options? by Will_TA · · Score: 5, Informative
      Options away from Outlook? In Windows My university uses Pegasus, my favorite is Balsa (Linux/X Windows), Pine ('nix/Cmd Line)or Eudora (Winblows)
    2. Re:Options? by RazzleFrog · · Score: 5, Informative

      How about you just educate yourself and your coworkers instead? Email viruses are not just about the program used - they are also about ignornace. Here is a hint to get you started:

      1) Apply all security patches from Microsoft.

      I was just interupted as I was typing this by a coworker asking me about a virus (talk about synchronicity). We don't use Outlook and she wasn't infected but she printed out the email and showed it to me. Sure enough - whatever.scr. I told her to delete it immediately.

      Why did she ask me first and not print it? Because we have a policy here - which brings me to point 2:

      2) Don't open anything that isn't work related.
      3) All computers show all extensions on files.
      4) Only open files that you expected with .xls or .doc extensions only (no .doc.js, etc.).
      5) If you get anything else - then ask me or somebody else informed about the latest viruses.
      6) When in doubt, call the sender and ask if they intended to send the email.

      With all of these in place, when a virus is sent to one of our employees it does not propogate.

      I leave you with this thought. A few weeks ago somebody in another department received an email warning about a virus go around. The email said to email this warning to EVERYBODY IN YOUR ADDRESS BOOK. One of my coworkers received the email and asked me about it. Of course it was a hoax and I wrote an email back to the original sender telling her that she basically just sent out a manual email. If everybody sent out that email to everybody in their address book it would be a disaster. The moral of the story - ignorance is the worst virus.

  6. My wrist hurts, blah, blah, blah... by hansendc · · Score: 5, Funny
    My wrist hurts from deleting over a meg of mail worm viruses a day.
    How many times do we have to hear Taco complain about deleting email worms? You can script up a huge database-backed website, but you can't write a freakin' procmail script?
    1. Re:My wrist hurts, blah, blah, blah... by sandidge · · Score: 5, Funny

      I think "deleting over a meg of mail worm viruses" might actually be /. slang for "polishing the pleasure pole".

  7. Re:there should come a law for it... by tps12 · · Score: 5, Funny

    Legislation containing the language "BWUHAHAHAHA", while not specifically prohibited by the Constitution, has historically been held in disdain by the Supreme Court.

    --

    Karma: Good (despite my invention of the Karma: sig)
  8. Suggestion by szcx · · Score: 5, Funny
    My wrist hurts from deleting over a meg of mail worm viruses a day.
    Fire your administrator. What kind of idiot runs mailservers without AV software installed?
  9. Why I find Klez so interesting... by bmooney28 · · Score: 5, Interesting
    Frankly i've been facinated with the Klez virus for two reasons...

    First of all, I did some calculations, and found that there are over 1600 different subject line possibilities alone with this virus! This takes into consideration the number of variable words within the subject lines, and doesn't even account for the number of different message bodies. All things considered, there are probably over 10,000 possibilities!

    The second thing about Klez that I find interesting is the payload... You often get totally random files from people's computers (if they survive virus removal)... For example, one of my coworkers got the 2001 operating budget of her church, and was able to see how much everyone was paid, how much they blew on projects, etc... Opening your inbox is like opening presents on christmas morning... most of the stuff is pretty boring, but every once in awhile you open something interesting!

  10. Require PKC! by eddy · · Score: 5, Interesting
    Just because YOU don't want it doesn't mean it's not useful.

    You don't have to remove the functionality; just make it REQUIRE the script to be CRYPTOGRAPHICALLY SIGNED by a known entity, like the sysadmin.

    Fucking simple solution, unless you wanna argue that clients should execute code from UNKNOWN and UNTRUSTED sources for some reason?

    --
    Belief is the currency of delusion.