How are you - Klez-H WORM?

[Guest guest]

I believe that this "how are you" message may be a version of the Klex-H

Worm. Here's a note

I recently sent to our department. (Sophos is our virus scan.)

 

****************************

 

The virus -- actually a worm -- going around campus may or may not have

infected your computer. It's still worth getting your computer checked

out if

you have received any strange e-mails or Sophos catches anything in its

scan.

 

 

Here's the info from the Sophos website

http://www.sophos.com/virusinfo/articles/klezh2.html

 

**************************

The recent W32/Klez-H worm uses its own SMTP engine, and can appear to

have

come from any email address. Some infected messages have a sender field

and

message text which imply that the message was sent by a major anti-virus

vendor

(the virus can use the names Kaspersky, F-Secure, Symantec and Trend

Micro as

well as Sophos).

 

Sophos Anti-Virus has been capable of protecting against W32/Klez-H, via

 

detection of its earlier variant W32/Klez-G, since 7 February 2002.