You received the Klez.h variant. http://www.viruslist.com/eng/viruslist.html?id=4292
I received this and dozens of other infected emails from a friend whose Windows computer got infected. Naturally, I was not affected since I am using Linux, but it was a real mess for him to clean up. It even sent out a few copies of itself with my email address (which it obtained from his address book) as the return address. Mike poogle wrote: > I may be wrong but I think I have received a new twist to the Klez.e worm in > which case I think cross posting to warn others is appropriate, if I'm wrong > I apologise for cross posting. > I paste below the text of the e mail which came with an attachment called > width.exe which I will e mail off-list to anyone who wants to look at it at > their own risk of course, a second attachment in html read " Read the OEM > Privacy Statement This page is unavailable. Please check with your computer > manufacturer.To continue to register your computer and Microsoft Windows, > click Back. " and a back button followed. > I am Windows free so I can't virus scan the attachment and I'm not a > programmer so although I could look at it it would mean nothing to me. > > The text:- > > Klez.E is the most common world-wide spreading worm.It's very dangerous by > corrupting your files. Because of its very smart stealth and anti-anti-virus > technic,most common AV software can't detect or clean it. We developed this > free immunity tool to defeat the malicious virus. You only need to run this > tool once,and then Klez will never come into your PC. > NOTE: Because this tool acts as a fake Klez to fool the real worm,some AV > monitor maybe cry when you run it. If so,Ignore the warning,and select > 'continue'. > If you have any question,please [there was an e mail link here] > > > > > > > > > > ------------------------------------------------------------------------ > > Want to buy your Pack or Services from MandrakeSoft? > Go to http://www.mandrakestore.com >
Want to buy your Pack or Services from MandrakeSoft? Go to http://www.mandrakestore.com
