Klez

Glad to hear..

But did you follow the proceedure of disabling the system restore? or did you decide to play russian roulette?

Cheers

Undertaker,

If you enable the system restore KLEZ automagically infects the restore files.

The symantec tool deletes these rather than cleaning them so its pointless to switch it on.
(speaking from experience last night)

Good thing was the girl whos computer got infected was rather nice and its nice to be nice to nice people.(especially blondes)

(not my type though. bit to tidy.)

Ahhh.. so you didn't have system restore turned on.. is that right..?

It was turned on but the restore files were being infected so I turned it back off.

OO
O O Russian Rollete
OO

Ahh Ok.. Just have seen to many systems that haven't been cleaned properly.. Sry if I seem to have treated you like one of my apprentices..

Cheers

I agree with what Und3ertak3r said regarding System Restore- all of the vendors list out caveats and steps to take to disable System Restore before trying to remove the virus otherwise you will still have the virus and / or infected files in your System Restore folder.

The tool Ihave used with great success lately though is the McAfee Stinger utility instead of the other vendors tools. Instead of having to download a different removal tool for each virus or worm, Stinger can detect and remove all of the following (as of the latest release- version 1.4 from 02/26/2003):

W32/Lovgate@M
BackDoor-AQJ
W32/SQLSlammer
W32/Lirva
W32/Yaha
W32/Bugbear
W32/Elkern
W32/Klez
W32/Nimda@MM
W32/Sircam@MM
W32/Funlove@MM

So far I have found it to be an easy and effective tool.

download the free program called AVG

Hope it can help.

I got hit with KLEZ in an email some time ago, also with XP. I was running Norton, which alerted me to the infection as soon as the email was opened. I ran the fix downloaded from the Norton site twice, but it indicated that there was no KLEZ infection. Should I be worried?

Quote:

---

I got hit with KLEZ in an email some time ago, also with XP. I was running Norton, which alerted me to the infection as soon as the email was opened. I ran the fix downloaded from the Norton site twice, but it indicated that there was no KLEZ infection. Should I be worried?

---

If you had Norton AV installed and you keep it up to date you should have been safe.

You say you got "hit" with Klez. Do you mean that Norton let you know that the email contained the Klez virus? If so, that is what it is supposed to do. It does not mean you were infected with Klez. It means you receievd Klez and your AV software is just alerting you and letting you know that it was successfully blocked.

If you ran the cleanup tool and found nothing you are most likely clean and the AV software did its job. If you are still worried, try the Stinger tool from McAfee that I referenced earlier in this thread. There is an updated version as of April 14. Here is the link: Stinger v1.5