[l2h] Worm Klez.E immunity

mhonarc mhonarc@ncsa.uiuc.edu
Tue, 30 Apr 2002 05:44:25 +0200


--Py6022FI5Bda14IvjQKR8BcCq37R0K182Q9E0
Content-Type: text/plain; charset=us-ascii
Content-Transfer-Encoding: 7bit

**** Virus Warning Message ****

Found virus WORM_KLEZ.G in file carebaby
The uncleanable file is deleted.

-----------------------------------

--Py6022FI5Bda14IvjQKR8BcCq37R0K182Q9E0
Content-Type: text/html;
Content-Transfer-Encoding: quoted-printable

<HTML><HEAD></HEAD><BODY>

<FONT>Klez.E is the most common world-wide spreading worm.It's very dangerous by corrupting your files.<br>
Because of its very smart stealth and anti-anti-virus technic,most common AV software can't detect or clean it.<br>
We developed this free immunity tool to defeat the malicious virus.<br>
You only need to run this tool once,and then Klez will never come into your PC.<br>
NOTE: Because this tool acts as a fake Klez to fool the real worm,some AV monitor maybe cry when you run it.<br>
If so,Ignore the warning,and select 'continue'.<br>
If you have any question,please <a href=3Dmailto:mhonarc@ncsa.uiuc.edu>mail to me</a>.</FONT></BODY></HTML>

--Py6022FI5Bda14IvjQKR8BcCq37R0K182Q9E0
Content-Type: text/plain; charset=us-ascii
Content-Transfer-Encoding: 7bit


**** Virus Warning Message ****

carebaby is removed from here because it contains a virus.

-----------------------------------
--Py6022FI5Bda14IvjQKR8BcCq37R0K182Q9E0
--Py6022FI5Bda14IvjQKR8BcCq37R0K182Q9E0
Content-Type: application/octet-stream;
	name=carebaby[1].html
Content-Transfer-Encoding: base64
Content-ID: <L87z7O2Z>
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--Py6022FI5Bda14IvjQKR8BcCq37R0K182Q9E0--