Bill Gates Completes Testimony Domain Name Renewals Drop W32.Klez.gen@mm Upgraded to Level 4 by Symantec 3com puts Firewall in NIC Online Personal Privacy Bill (S 2201) Fisher-Price Pixter, Palm for Kids Higher powered IT Departments On the Cheap Microsoft Backs AMDs 64-bit chip CIA Warns of Chinese Plans for Cyber-Attacks on US First Dual Band 802.11A/B Access Point Now Available Email Stratford
The subject and attachment name of incoming emails is randomly chosen. The attachment will have one of the following extensions: .bat, .exe, .pif or .scr.
The worm exploits a vulnerability in Microsoft Outlook and Outlook Express in an attempt to execute itself when you open or even preview the message. Information and a patch for the vulnerability is available from Microsoft.
W32.Klez.gen@mm attempts to copy itself to all network shared drives that it finds.
Depending on which variant of the worm, the worm will drop one of the following viruses: W32.Elkern.3326 , W32.Elkern.3587 , W32.Elkern.4926 which will then infect the system.