SHARE
Facebook X Pinterest WhatsApp

Klez and Yaha Still Top Troublemakers

Two worms — Klez and Yaha — continue to plague users around the world, despite months of warnings to install the patches needed to easily fend them off. Variants of the Klez worm, the Yaha worm and the Avril worm are still causing enough problems to make two separate lists of the top worms and […]

Apr 1, 2003
Datamation content and product recommendations are editorially independent. We may make money when you click on links to our partners. Learn More

Two worms — Klez and Yaha — continue to plague users around the world, despite months of

warnings to install the patches needed to easily fend them off.

Variants of the Klez worm, the Yaha worm and the Avril worm are still causing enough

problems to make two separate lists of the top worms and viruses for the month of March.

Sophos Inc. and Central Command Inc., both antivirus vendors, put the three worms on their

list of notorious elite. A Sobig variant, along with Nimda and Bugbear, also found spots on

the listings.

”Remarkably, the Internet worms, Klez.E and Yaha.E have remained number one and number two

[on our list] for the past five months,” says Steven Sundermeier, a product manager with

Central Command. ”This is a clear indication that many users continue to ignore the

importance of installing and maintaining up-to-date antivirus software.”

Klez.E accounted for 21.6 percent of all virus infection reports at Central Command last

month. Yaha.E reports accounted for 10.8 percent.

At Sophos, the highest-ranked new entry to March’s virus list is Gibe-D, a variant of the

Gibe worm which spreads through the KaZaA network. ”It indicates the growing popularity of

file sharing,” says Chris Belthoff, a senior product manager at Sophos. ”Businesses need

to rethink whether these applications have a valid place on their networks.”

At Central Command, new viruses on the list included the Ganda worm and the NiceHello worm.

Ganda is designed to prey on the world’s interest in the events in the Middle East. One body

message claims the email contains pictures taken by one of the U.S. spy satellites during a

mission over Iraq. The NiceHello worm emails itself to addresses found on the MSN Messenger

contact list. The email contents are written in Spanish.

Sophos reports that it detected 883 new viruses, worms and Trojan horses in March.

Sophos also reports that a new hoax has taken the highest spot in the company’s list of top

hoaxes.

”The WTC Survivor hoax, which falsely warns of a Sept. 11 themed virus, has taken over the

number one slot for the first time in a year,” says Belthoff. ”People receiving this hoax

should ignore its advice and not email the warning to everyone they know. Much like real

viruses, hoaxes clog mail servers and cause unnecessary confusion.”

  SEE ALL
ARTICLES
 
SG

Sharon Gaudin is a veteran technology journalist who has worked for the likes of Computerworld, InformationWeek, and Datamation. She has covered everything from the cloud, security, and social networking to software development, robotics, artificial intelligence, and hardware.

Recommended for you...

Coupang Breach Exposes 33.7M South Koreans’ Data
Asahi Group Reveals Findings of Cyberattack
Datamation Staff
Nov 28, 2025
OpenAI Discloses Mixpanel Security Incident Affecting Some API Users
Datamation Staff
Nov 27, 2025
Datamation Logo

Datamation is the leading industry resource for B2B data professionals and technology buyers. Datamation's focus is on providing insight into the latest trends and innovation in AI, data security, big data, and more, along with in-depth product recommendations and comparisons. More than 1.7M users gain insight and guidance from Datamation every year.

Property of TechnologyAdvice. © 2025 TechnologyAdvice. All Rights Reserved

Advertiser Disclosure: Some of the products that appear on this site are from companies from which TechnologyAdvice receives compensation. This compensation may impact how and where products appear on this site including, for example, the order in which they appear. TechnologyAdvice does not include all companies or all types of products available in the marketplace.