General discussion

Locked

Virus W32.Klez.H@mm

By Shanghai Sam ·
I'm using Norton Antivirus Corporate Edition, 7.5 version.I'm facing virus problem of W32.Klez.H@mm.I had downloaded the removal tools for this virus and runned in all my pc and is detected. But when i tried to scan the pc in my company using SSC. The email virus alert send me that this virus is detected and the actual action is : Leave Alone.When i try to scan that "infected"pc, the result shown that no virus is detected. How to resolve this problem. How can i totally clear the virus (Leave ALone). Its make me received many email alert every time SSC scan all the pc.

This conversation is currently closed to new comments.

4 total posts (Page 1 of 1)  
| Thread display: Collapse - | Expand +

All Comments

Collapse -

Virus W32.Klez.H@mm

by Still_learning In reply to Virus W32.Klez.H@mm

The virus when it gets on to your system attacks the anti-virus program and infects it also. You will need to uninstall the anti-virus program and reinstall it and download the most current virus signature file. There is a good description at Symantec's web site:

w32.klez.h@mm.html">http://securityresponse.symantec.com/avcenter/venc/data/w32.klez.h@mm.html

I am also wading through the damage that this virus does, on computers that I support. Good luck. Hope this helps.

Collapse -

Virus W32.Klez.H@mm

by pierrejamme In reply to Virus W32.Klez.H@mm

I have been fighting this virus also, it is protective of itself. I use McAfee and their instruction are Command Prompt stuff, including renaming the scan.exe to clean.exe because scan.exe is disabled by the virus. Another thought is to use a strictly DOS baased scanned such as NOD32. Good luck

Collapse -

Virus W32.Klez.H@mm

by techrepublic In reply to Virus W32.Klez.H@mm

Make sure you boot to safe mode. disable system reestore on XP and ME machines and run the klez removel tool. then remove your anti-virus from your system and then reboot the system and reinstall norton I did this on 150 workstations in a 20 hour shift.

Collapse -

Virus W32.Klez.H@mm

by underconstruction In reply to Virus W32.Klez.H@mm

If SSC is still giving virus warnings and the workstations are not infected, make sure that you have deleted the files from the "Quarantine" of each PC

Back to Security Forum
4 total posts (Page 1 of 1)  

Related Discussions

Security Forums