Low threat Level,
Low damage capabilities,
Distinguishing charcteristscs:
Subject: Re:
Message:
You received this email because you where sent a 'pass this on e-
messenger card' through one of our valued partners. If you believe
you received this message in error or would no longer like to receive
e-mail from us click here
http:/ /www.geocities.com/ecardmessenger/us.htm
To download your card click on the link below:
http:/ /www.geocities.com/ecardmessenger/xxxxxxxxx.zip
Details:
The W32.Klexe.Worm useses Microsoft Outlook to send a link to a
website to all the contacts in the Outlook Address Book. The link is
a zipped version of the worm. Part of this worm has a Trojan
keystroke capturing component that sends the stolen information to
the hacker's email address.
For more information see
http://www.symantec.com/avcenter/venc/data/w32.klexe.worm.html