Home Page Owners Registry Discussion Forums ProwlerMall Event Scrapbooks About

Click here to return to the Prowler Online Board Main Page
Thread Closed  Topic Closed
  ProwlerOnline, Plymouth/Chrysler Prowler Discussion Forum
  General Prowler Discussion
  cousin Klez again...

Post New Topic  
edit profile | register | preferences | faq | search

   Bottom of Page next newest topic | next oldest topic
Author Topic:   cousin Klez again...
CatDude



POA Site Supporter
Prowler Avatar Master

From:Charlottesville, Va
Registered: Feb 2002
Admin Use

posted 08-06-2002 10:21 PM     Click Here to See the Profile for CatDude     send a private message to CatDude   Edit/Delete Message   Reply w/Quote   Search for more posts by CatDude
W32.Klez.H@mm is again on the rampage... I've been getting several emails again containing this dangerous virus.

If you have a file name "braces_red...", somewhere on your machine, then you most likely have the virus. The virus is famous for taking a file from your pc, attaching it and sending it - in an attempt to make it look important.

Please do a search for braces_red*.* on your pc like this:

1. right-click START
2. click explore
3. select search
4. type in braces_red*.* in the "search for files and folders..." box
5. type c:\ in the "Look in" box.
6. For search options, check "advanced options" and make sure that "search subfolders" is checked.
7. click "search now".

These instructions are for Windows ME.... There might be a slight variation in these instructions if you are running a different version of windows.

If you find this file, then there is 99% chance that your machine is infected. If you need help cleaning it, let me know... This virus is not always easy to get rid of.

------------------

VIRGINIA CAT DUDE '02 SILVER SEE THE LOUISVILLE, KY CD

ed monahan





POA Lifetime Site Supporter
Prowler Junkie
Personal ScrapBook

From:Cincinnati, Oh, USA
Registered: Jul 2000
Admin Use

posted 08-07-2002 02:49 AM     Click Here to See the Profile for ed monahan     send a private message to ed monahan   Edit/Delete Message   Reply w/Quote   Search for more posts by ed monahan
CatDude, thanks. I am still clean but I am getting up to 10 suspicious files a day. I am not opening anything.
thecatos


POA Site Supporter
Prowler Junkie
Personal ScrapBook

From:Copperas Cove, Texas
Registered: Oct 2001
Admin Use

posted 08-07-2002 03:06 AM     Click Here to See the Profile for thecatos     send a private message to thecatos   Edit/Delete Message   Reply w/Quote   Search for more posts by thecatos
Well crap ive got that file in my temp internet folder. I ran norton and it said it was clean. Ive deleted the files and trash. Updated Norton and will run it again. Anything else i can do??? The file opened with Norton Antivirus was a picture of prowler braces *with a red background.

------------------
Back off man, I'm a scientist!!

thecatos


POA Site Supporter
Prowler Junkie
Personal ScrapBook

From:Copperas Cove, Texas
Registered: Oct 2001
Admin Use

posted 08-07-2002 04:18 AM     Click Here to See the Profile for thecatos     send a private message to thecatos   Edit/Delete Message   Reply w/Quote   Search for more posts by thecatos
Iam back, the virus was on my computer *ughh...infected no!! It was quarantined by Norton. Needless to say Ive had it scrubbed off my computer. Apparently its a common virus some of its characteristics, memory resident,size stealth, triggered, encrypting, polymorphic....but Norton scans for it. So I guess Iam clean. No germs. Clean bill of health.

------------------
Back off man, I'm a scientist!!

CatDude



POA Site Supporter
Prowler Avatar Master

From:Charlottesville, Va
Registered: Feb 2002
Admin Use

posted 08-07-2002 01:41 PM     Click Here to See the Profile for CatDude     send a private message to CatDude   Edit/Delete Message   Reply w/Quote   Search for more posts by CatDude
This is so funny... "cousin Klez" emailed me this picture. Thanks Klez!!!

Joking aside... If you recognize this picture (filename angie_185.jpg), then you probably have Klez resident on your machine...

lol... this is too funny...

CJ





POA Lifetime Site Supporter
Prowler Junkie
Personal ScrapBook

From:Rochester Hills, MI USA
Registered: Jul 2000
Admin Use

posted 08-07-2002 01:58 PM     Click Here to See the Profile for CJ     send a private message to CJ   Edit/Delete Message   Reply w/Quote   Search for more posts by CJ
I'm clean..........
mojoriser

Prowler Junkie

From:Plano, TX, USA
Registered: Feb 2002
Admin Use

posted 08-07-2002 02:56 PM     Click Here to See the Profile for mojoriser     send a private message to mojoriser   Edit/Delete Message   Reply w/Quote   Search for more posts by mojoriser
Hey Prowlees--if you are tired of getting viruses like Klez, why not just get your mail from a provider that blocks the viruses at their server, long before they ever make it to your PC?

That's what I do! When I'm not out Prowlin', I run a web hosting/email company. Email is my specialty. I block all viruses and almost all SPAM from getting to your mailbox, and therefore, from getting to your PC. Check out my site at www.theaardvark.com

This is not a sales forum, so I won't go into detail here. If anyone is interested or wants to know more, drop me a line.

Mitchell

------------------

ETMIDZT


POA Site Supporter
Prowler Junkie

From:Spring Lake, Mi. USA
Registered: Jul 2000
Admin Use

posted 08-07-2002 03:07 PM     Click Here to See the Profile for ETMIDZT     send a private message to ETMIDZT   Edit/Delete Message   Reply w/Quote   Search for more posts by ETMIDZT
I agree! That's what I have with my server! I also run a virus scan everyday. Better safe than sorry!!
sunbird

Prowler Junkie

From:Ridgecrest, California
Registered: Dec 2001
Admin Use

posted 08-07-2002 10:59 PM     Click Here to See the Profile for sunbird     send a private message to sunbird   Edit/Delete Message   Reply w/Quote   Search for more posts by sunbird
quote:

I am picking on you personally and some other folks, because you were on-line at the time I received this virus in email... There is strong likelihood that one of you has a dangerous virus on your machine.

If you have not read this already, then please read this dicussion: http://www.prowleronline.com/ubb/Forum1/HTML/006879.html

If you have any questions, feel free to ask...

later,
Damon (VirginiaCatDude).


You've got the wrong dude! Just because someone is on line the same time as you doesn't mean they have sent you anything. I have run both of your tests with 0 results. I as much suspected that. I have a firewall, virus scan, and spam blocking on my gateway. On my computer, I have Norton Corporate Edition, which is updated a minimum of once a week. I run regular virus scans and as you would expect, it is clean as a whistle.

If you are having difficulties with KLEZ, might I suggest you get Norton Corporate Edition? It is able to detect KLEZ.

This message has been edited by sunbird on 08-07-2002 at 11:00 PM

ETMIDZT


POA Site Supporter
Prowler Junkie

From:Spring Lake, Mi. USA
Registered: Jul 2000
Admin Use

posted 08-08-2002 07:59 AM     Click Here to See the Profile for ETMIDZT     send a private message to ETMIDZT   Edit/Delete Message   Reply w/Quote   Search for more posts by ETMIDZT
I don't have an address book....Never have! Was told years ago to avoid one so viruses won't attach. I type in ea. addy I e-mail by hand. I've been gettin lots of e-mails from people on the POA with No Content> My server is apparently catching doing it's job!
CatDude



POA Site Supporter
Prowler Avatar Master

From:Charlottesville, Va
Registered: Feb 2002
Admin Use

posted 08-08-2002 08:11 AM     Click Here to See the Profile for CatDude     send a private message to CatDude   Edit/Delete Message   Reply w/Quote   Search for more posts by CatDude
quote:
Originally posted by sunbird:
You've got the wrong dude! Just because someone is on line the same time as you doesn't mean they have sent you anything.

Sorry sunbird... I had no idea that you cleaned your machine as thoroughly as I do... All I know is there is a strong likelihood that someone who was on-line at the time I received the virus probably has an infected machine. I did a bulk mail to the folks that were on-line at that time in hopes I might make the affected person aware.

Prowler

POA Site Supporter
Prowler Junkie

From:Erhard, MN
Registered: Jun 2002
Admin Use

posted 08-09-2002 10:32 AM     Click Here to See the Profile for Prowler     send a private message to Prowler   Edit/Delete Message   Reply w/Quote   Search for more posts by Prowler
Hey,

Just got another one!!!
A IE 6.0 patchfrom aotebfie

Be careful!

Prowler

sunbird

Prowler Junkie

From:Ridgecrest, California
Registered: Dec 2001
Admin Use

posted 08-09-2002 11:51 PM     Click Here to See the Profile for sunbird     send a private message to sunbird   Edit/Delete Message   Reply w/Quote   Search for more posts by sunbird
No problem, Cat-Dude. In reality, the message probably came from someone who was not on the POA, but the POA member was in the address book of the computer that sent it. The person who owns that computer probably doesn't know that they sent it either, they just clicked on an attachment to see what it was. I do not open attachments, even if I know the person that sent it, because if it is a virus, they probably didn't send it. I know this sounds like double talk, it is called Spoofing.

Folks, I know curiosity is a strong urge, but do not open any e-mail attachments. Also, Microsoft and Norton do not send mail to users. Microsoft has 'Automatic Updates' and Norton has 'LiveUpdate' to keep your machine up to date. Never do they mail out fixes. Anything saying they sent you a fix is probably a virus.

All times are CT (US)  Top of Page  Previous Page

 Return to General Prowler Discussion  next newest topic | next oldest topic



Administrative Options: Open Topic |Make Sticky | Archive/Move | Delete Topic
Post New Topic  
Hop to:

Contact Us | Prowler Online Homepage

All material contained herein, Copyright 2000 - 2012 ProwlerOnline.com
E-Innovations, LP

POA Terms of Service