The e-mail through which the worm spreads always includes a text portion and one or more attachments. The text portion consists of either an HTML internal frame tag which causes buggy e-mail clients to automatically execute the worm, or a few lines of text that attempt to induce the recipient to execute the worm by opening the attachment (sometimes by claiming that the attachment is a patch from Microsoft; sometimes by claiming that the attachment is an antidote for the Klez worm). The first attachment is always the worm, whose internals vary.
Once the worm is executed, either automatically by the buggy HTML engine or manually by a user, it searches for addresses to send itself to. When it sends itself out, it may attach a file from the infected machine, leading to possible privacy breaches.
Later variants of the worm would use a false From address, picking an e-mail address at random from the infected machine's Outlook or Outlook Express address book, making it impossible for casual observers to determine which machine is infected, and making it difficult for experts to determine anything more than the infected machine's Internet Service Provider.
klez, other, uses, klez, disambiguation, this, article, does, cite, sources, please, help, improve, this, article, adding, citations, reliable, sources, unsourced, material, challenged, removed, find, sources, news, newspapers, books, scholar, jstor, december,. For other uses see KLEZ disambiguation This article does not cite any sources Please help improve this article by adding citations to reliable sources Unsourced material may be challenged and removed Find sources Klez news newspapers books scholar JSTOR December 2009 Learn how and when to remove this template message Klez is a computer worm that propagates via e mail It first appeared in October 2001 A number of variants of the worm exist Klez infects Microsoft Windows systems exploiting a vulnerability in Internet Explorer s Trident layout engine used by both Microsoft Outlook and Outlook Express to render HTML mail The e mail through which the worm spreads always includes a text portion and one or more attachments The text portion consists of either an HTML internal frame tag which causes buggy e mail clients to automatically execute the worm or a few lines of text that attempt to induce the recipient to execute the worm by opening the attachment sometimes by claiming that the attachment is a patch from Microsoft sometimes by claiming that the attachment is an antidote for the Klez worm The first attachment is always the worm whose internals vary Once the worm is executed either automatically by the buggy HTML engine or manually by a user it searches for addresses to send itself to When it sends itself out it may attach a file from the infected machine leading to possible privacy breaches Later variants of the worm would use a false From address picking an e mail address at random from the infected machine s Outlook or Outlook Express address book making it impossible for casual observers to determine which machine is infected and making it difficult for experts to determine anything more than the infected machine s Internet Service Provider See also EditTimeline of computer viruses and worms Comparison of computer viruses Computer virusesExternal links EditAnti virus provider F Secure Klez information Anti virus provider Trend Micro Klez information Anti virus provider Symantec Klez information AUSCERT External Security Bulletin ESB 2001 456 Malicious software report W32 KLEZ 29 October 2001 Retrieved from https en wikipedia org w index php title Klez amp oldid 1087436654, wikipedia, wiki, book, books, library,
