06/07/2002: IMPORTANT INFORMATION ON THE KLEZ COMPUTER VIRUS

During the past few months, there has been an increase in the proliferation of variants of the Klez computer worm, an Internet worm that spreads by creating duplicates of itself on other computer hard drives, systems, or networks. Klez usually comes in the form of an email attachment, and infects PCs running the Windows operating system. Computers running non-Windows operating systems are not vulnerable to Klez. Once a computer is infected, Klez will automatically send out copies of itself whenever the machine is connected to the Internet. This usually happens without the user's knowledge.

Klez also has the ability to spoof the email "FROM:" field. The sender's address used by the virus may be one that was found on the infected user's system. Thus, it may appear that you have received this virus from one person, when it was actually sent from a different user's system. Infected machines have the ability to send out spoofed email using a fake "FROM:" address. Doing so makes it appear that a user sent a viral email when, in fact, the infected machine is sending out such messages. This situation adds to the confusion in tracing the real infected culprit, and complaints are often generated because of these spoofed "FROM:" addresses.

To protect your computer from Klez and many other viruses, you should first make sure that your Windows operating system is up to date with the latest patches and updates. The Microsoft Windows Update site can be found at:

http://windowsupdate.microsoft.com/

You should install any critical updates that are available for your computer.

If you are using an antivirus program, you should make sure that the program's virus definitions are up to date and scan your computer for viruses on a regular basis. If you don't have antivirus software, McAfee VirusScan is available as a free download from the Bruin OnLine website at:

http://www.bol.ucla.edu/software/win/

There are a number of free Klez removal utilities available on the Internet. Symantec has one available for download at:

http://securityresponse.symantec.com/avcenter/venc/data/w32.klez.removal.tool.htm

A more detailed explanation about the Klez worm family can be found in the Kaspersky Virus Encyclopedia at:

http://www.viruslist.com/eng/viruslist.html?id=4292

Please use the above information to secure your computer and prevent it from spreading this worm.

If you have any questions or need assistance performing any of the above instructions, please contact the Bruin OnLine Help Desk at (310) 825-7452, option 1.