Re: XP Service (?) virus

From: Some Body (some@body.com)
Date: 06/30/02 

From: "Some Body" <some@body.com>
Date: Sun, 30 Jun 2002 08:14:25 -0700

MisClick?? hehehe OK, just misclick your way to the
permissions tab in regedit, change the permissons on the
legacy folder you want to delete to, etc..

Some Body

>-----Original Message-----
>X-No-Archive: yes
>
>you may have the Klez virus
>http://securityresponse.symantec.com/avcenter/venc/data/w
32.klez.h@mm.html
>
>"j" <spam@spam.com> wrote in message
news:uG8fhkBICHA.2364@tkmsftngp11...
>> Somehow thru a misclick a virus was run. This virus
installs a service
>that
>> runs in windows/system32
>> with a name like winkppm.exe everytime I try to
delete it and disable it.
>A
>> new winkxxx.exe appears! Where is the master file?
plus it is listed as a
>> legacy device in the registry and it doesn't not allow
me to delete the
>> LEGACY_WINKPPM folder. Also the task manager is
prevented from showing up.
>> It created a admin account called SQLDebugger. It is
also sending mail
>from
>> outlook
>>
>>
>> What is this? and how can I get rid of it?
>>
__________________________________________________________
________ Joe M
>> ICQ#: 161698165 Current ICQ status: + More ways to
contact me
>>
__________________________________________________________
________
>>
>>
>
>
>.
>