This question is also about W32.Klez. When my friend, whose computer was infected with this worm, called her ISP, she was told by the technician that she could go on the Internet to get the removal tool and instructions, but she should not open her Outlook Express, as that would send out more infected messages. Is that accurate?

Since Klez uses its own SMTP engine, does Outlook Express have anything to do with it once the computer is already infected? Or would just turning on her computer and making the dial up connection send off the next round of infected messages which is in the code?

Sorry I just don't comprehend how such things work.