Klez Worm Goes After Myriad Files
Yet another e-mail-borne worm is making the rounds on the Internet using an infection and pattern that should be quite familiar to administrators and users.Yet another e-mail-borne worm is making the rounds on the Internet using an infection and pattern that should be quite familiar to administrators and users. The worm is capable of deleting anti-virus and a lengthy list of other files. On the sixth day of every month save January and July, the worm tries to overwrite all files with the following extensions: .txt, .htm, .html, .wab, .doc, .xls, .jpg, .cpp, .c, .pas, .mpg, .mpeg, .bak and .mp3. Klez.E showed up on anti-virus companies radar screens Thursday and hasnt spread very widely, although, as a mass-mailing worm, it certainly has that potential.
The e-mail message carrying the worm arrives in the users inbox with a random subject line and bears an attachment that also has a randomized name. The attachment can be a file with either a .bat, .exe, .pif or .scr extension, according to an advisory published by Symantec Corp, which rates the worms severity as low.