WORM_KLEZ virus

Here's some information:

(There are no spaces in the URL)

www.pcworld.com/news/article/0,aid,102441,00.asp

If you are receiving email on a Unix machine, you can use procmail to avoid ever seeing Klez again. Just put the code below near the top of your .procmailrc file (a plain text file in your home directory, if it's not there, create it to turn procmail filtering on):

## Get those idiotic Klez viruses out of the way:
:0 :
* ^Content-Type: +multipart/alternative
* !boundary="
/dev/null

This filter works because Klez doesn't follow the MIME convention of beginning the boundary-string that separates different parts of the multipart-message with a double quote. That's also why most mail programs won't recognize this as an attachment - only MS Outjunk will recognize and execute it.

there are a number of variations of this virus.
i counted at least five on the Symantec page.
you can download the klez killer for free at
www.securityresponse.symantec.com/

good luck