Security

Ask something
Discussion Locked

Klez Virus Problem

0 helpful
12 replies

by bitsybug20 1 view

Closed to new repliesThis discussion is closed. It stays readable, but it takes no new replies.

I have had a problem with this as well. I have Mcafee and have kept up with all the new sdat upgrades, but am still having problems. Someone mentioned blocking executable files? How would I go about this? The virus scan doesn't show any infectedfiles, yet I know there is a problem, I just can't find it. I keep getting these stupid emails, and I don't even view them and it pops up! It's very frusterating, because just when I think I am close to getting it cleaned up, someone sends it to me again! I appreciate any help with this. Thanks,
Diana

12 replies

by dklippert

If you have the latest McAffe you should be all right. The new messages you are getting are coming from your friends.
Why do you think you have a problem?

by bitsybug20

I have McAfee, and no these are not coming from friends. I have found a way to reject the email from downloading, and it is always from strange emails. I have the problem because there are idiots out there who have nothing better to do! And the Klez virus comes from people getting ahold of your email address list, which apparently someone got ahold of our cooperate email address list. Very large company, so big problem.

by klikklikcomputers

I have encountered this problem at one of my clients They have 15 PCS with norton antivirus 2001 installed. Before KLEZ all of their systems got the virus and it is very annoying to deal with.I first got the latest dat files from the site, (the virus removal tool didn't work too well) updated all the systems and scanned them. In some instances there were over 3000 files infected with KLEZ and I had to scan the system a few times. DO CTRL-ALT-DEL and remove everything but systray, explorer and norton then do your scans that should be set to scan all files. It was not able to repair certain files (winword.exe,excel.exe in particular so just re install them and you are good to go.
Hey and don't open files with attachments!!! unless you are absolutely sure who it came from and they told you prior to sending you the attachment and set norton to scan your email it works.
GOOD LUCK!!!!!!

by bitsybug20

I'm sorry, that didn't help me cause I already did it, LOL. I do have McAfee and have tried running the scan, it doesn't find any infected files, but I know they are there because my computer keeps doing very strange things. I believe it has damaged some files that I can't identify. I don't think it was the KLEZ that did it though, I think it was an executable file that started downloading when I pulled my email over to outlook. It just started running before I could catch it, I hadn't evenopened any of the email yet. I caught it at the beginning of whatever it was and hit cancel, but I didn't get a chance to see what the heck it was. I have heard there are several other virus variations out there connected with Klez, perhaps one ofthem is the problem? You were more helpful then most, at least you seem to know what you are talking about.

by pierrejamme

Look at McAfee's instructions for removing in a Command Prompt. klez disables the scan.exe if it is able to take hold. The file itself is WINxxx.exe in the system directory. Or you might try athe Command Line scanner in DOS that comes with McAfeeif you have Win98, you will have to rename scan.exe to clean.exe or similar and expand the a current or nearly dat file (such as dat-4205.exe) into the Command Line directory. Or you can try a trialware DOS scanner such as NOD32. Good Luck

by bitsybug20

Sorry, been there, done that. One of the first things I did was go to McAfee and check out all this info and run the clean. I even had to unload and reload my McAfee. Unfortunately, when I update the sdat file, it keeps doing somekind of dump script on me when I reboot. Not sure what that is, but I have unloaded and reloaded 3 times and it still does it. I would just reformat and start the whole thing over, but this is my cooperate computer and I really hate to do that. So far I haven't had to do that with any of the other 15 computers at work here, and I really don't want to do it to this one, as it has a lot of info that we need. Thanks for your try though. Any other thoughts?

by beno

If you have mirroring, remove mirror, scan and repair both disc, re-create mirror.

by tlippert

The klez virus uses the malformed header vulnerablity in outlook. Do a windowsupdate. Run the scan from safe mode and you should be out of trouble

This discussion is closed to new replies.