[Dshield] Oxygen3 24h-365d [Panda Software warns that Klez.F activates on September 6 - 09/05/02]

Thomas.Deimel@gastechnology.org Thomas.Deimel at gastechnology.org
Fri Sep 6 15:42:13 GMT 2002

FYI, here's a piece for Panda on Klez.F activities for Septemer 6 and a
removal tool.

Thomas J. Deimel

----- Forwarded by Thomas Deimel/GTI on 09/06/2002 10:40 AM -----
                    Oxygen3 24h-365d                                                                                                      
                    <oxygen at PANDASOF       To:     OXYGEN3COM at OXYGEN3.PANDASOFTWARE.COM                                                   
                    TWARE.COM>             cc:                                                                                            
                                           Fax to:                                                                                        
                    09/05/2002 11:11       Subject:     Oxygen3 24h-365d [Panda Software warns that Klez.F activates on S                 
                    AM                      eptember 6 - 09/05/02]                                                                        
                    Please respond                                                                                                        
                    to Oxygen3                                                                                                            
                    24h-365d mailing                                                                                                      

       - Panda Software warns that Klez.F activates on September 6 -
    Oxygen3 24h-365d, by Panda Software (http://www.pandasoftware.com)

Madrid, September 5 2002 -- Panda Software warns users that the Klez.F worm
activates on September 6, with potentially serious consequences for

Klez.F is programmed so that on September 6, files with the following
extensions will be overwritten: BAK, C, CPP, DOC, HTM, HTML, JPG, MP3, MPG,

Panda Software recommends that users who haven't done so, update their
antiviruses and scan their entire systems to ensure that the Klez.F worm is
not lying hidden in their system.

As previously reported by Panda, Klez.F reaches users computers in an
with variable characteristics. If the recipient runs the file attached to
the message, the worm creates a copy of itself in the Windows system
directory and in the temporary files folder.

Panda Software users can update their antivirus solutions from the
website at http://www.pandasoftware.com. The PQREMOVE tool, a utility for
completely removing the virus from infected machines, can also be

Detailed information on W32/Klez.F is available from Panda Software's Virus
Encyclopedia at: http://www.pandasoftware.com/library/.

NOTE: The addresses above may not show up on your screen as single lines.
This would prevent you from using the links to access the web pages. If
happens, just use the 'cut' and 'paste' options to join the pieces of the

To unsubscribe from Oxygen3 24h-365d:

Send a message to the following address:
oxygen3com-SIGNOFF-REQUEST at oxygen3.pandasoftware.com

To contact with Panda Software, please visit:

This communication is for the use of the intended recipient only.  
It may contain information that is privileged and confidential.  
If you are not the intended recipient of this communication, 
any disclosure, copying, further distribution or use thereof is prohibited.  
If you have received this communication in error, 
please advise me by return e-mail or by telephone and delete/destroy it.

More information about the list mailing list