Symantec.com > Security Response > W32.Klez.gen@mm

W32.Klez.gen@mm

Risk Level 2: Low

Printer Friendly Page

Discovered: November 9, 2001
Updated: February 13, 2007 11:39:22 AM
Also Known As: W32/Klez.e@MM, W32/Klez.h@MM, W32/Klez.gen@MM, WORM_KLEZ.E, WORM_KLEZ.G, I-Worm.Klez.e, I-Worm.Klez.h, W32/Klez-E, W32/Klez-G, W32/Klez-H
Type: Worm, Virus
Systems Affected: Windows 2000, Windows 95, Windows 98, Windows Me, Windows NT, Windows XP
CVE References: CVE-2001-0154



W32.Klez.gen@mm is a generic detection that detects variants of W32.Klez.

In response to an increased number of variants of W32.Klez@mm, the generic detection, W32.Klez.gen@mm, was created. It was initially released with the definitions released on November 9, 2001.

Removal tool
Symantec has provided a tool to remove infections of all known variants of W32.Klez and W32.ElKern. If your computer is detected as infected with W32.Klez.gen@mm, download and run the tool. In most cases, the tool will be able to remove the infection. Try the tool first, as it is the easiest way to remove these threats.

To view an online demonstration on how to download and run this and several other tools, click here.




As aforementioned, in response to an increased number of variants of W32.Klez@mm, the generic detection, W32.Klez.gen@mm, was created. It was initially released with the definitions released on November 9, 2001. This generic detection method has been improved upon and updated several times since then. And, it now includes the .E and .H variants. Specific information about the W32.Klez.E@mm and W32.Klez.H@mm variants can be found at W32.Klez.E@mm and W32.Klez.H@mm, respectively.

For information about how Klez affects a Macintosh, refer to the document, "Are Macintoshes affected by the Klez virus?"

Protection

  • Initial Rapid Release version November 9, 2001
  • Latest Rapid Release version April 2, 2008 revision 050
  • Initial Daily Certified version November 9, 2001
  • Latest Daily Certified version June 17, 2008 revision 017
  • Initial Weekly Certified release date November 9, 2001

Click here for a more detailed description of Rapid Release and Daily Certified virus definitions.

Threat Assessment

Wild

  • Wild Level: Low
  • Number of Infections: More than 1000
  • Number of Sites: More than 10
  • Geographical Distribution: Medium
  • Threat Containment: Moderate
  • Removal: Difficult

Damage

  • Damage Level: Medium

Distribution

  • Distribution Level: High

Writeup By: Douglas Knowles
PRINT THIS PAGE
Search by name
Example: W32.Beagle.AG@mm
Norton Green PC Service
Windows Vista Security