Klez.H is more rampant than SirCam


Klez.H is more rampant than SirCam

Anti-virus specialist MessageLabs has warned users to prepare for viruses with prolonged attacks after its VirusEye scanning service reported record numbers of Klez.H attacks.

Klez.H was first released in April and, in spite of the release of anti-virus signatures to prevent infection, it has continued to spread at an astonishing rate, according to MessageLabs. It has overtaken SirCam which, until the start of this week, was the most rampant virus MessageLabs had tracked so far.

According to MessageLabs virus specialist Alex Shipp, the reason for Klez.H's success lies in its ability to cover its tracks and deceive recipients.

"Klez.H is able to select random names from address books to use as the sender address, and also creates a large range of subject, text and attachment names, making it difficult to identify and track," said Shipp.

MessageLabs said Klez.H represents a disturbing trend in virus writing, first seen in SirCam last year, where the viruses continually modify until they foil enough anti-virus scanners to spread successfully to e-mail users worldwide.

SirCam shook the security community and e-mail users worldwide last July when it maintained a rate of growth never seen before.

Shipp said, "When SirCam broke out last summer we thought that we were seeing one of a kind. However, Klez.H has shown us that highly sustainable viruses will continue to appear."

MessageLabs estimates that one in every 300 e-mails is infected with Klez.H.

Email Alerts

Register now to receive ComputerWeekly.com IT-related news, guides and more, delivered to your inbox.
By submitting your personal information, you agree to receive emails regarding relevant products and special offers from TechTarget and its partners. You also agree that your personal information may be transferred and processed in the United States, and that you have read and agree to the Terms of Use and the Privacy Policy.

COMMENTS powered by Disqus  //  Commenting policy