w32klez.h@mm

[cpyne]

Hi people I need some advise on the w32klez.h@mm worm.I am working om a pc and I have found this worm while scanning with Mcafee av the problem is my av software says it has found and deleted the worm but if I run another scan it shows up again and again.I have noticed while doing a search on google of the worm that there are some stand alone klez removers that seek out only this threat and claims to remove it once and for all.I have just tried the Mcafee AVERT Stinger version 1.2 built on jan 25 2003 but this has failed to remove it.Can anyone suggest a way to remove this worm that will actually work I would sure appreciate it.One more note I have ran the remover in safe mode with the same results.

Thanks cpyne

 

[carrr]

I've used this one, it worked (I've had no recurrence at least)...

http://securityresponse.symantec.com/avcenter/FixKlez.com

 

[Metaliczombi]

Go to this site and d/l the w32.klez removal tool form Norton

http://securityresponse.symantec.com/avcenter/tools.list.html

 

[smah]

What's the OS? Is it being found in the System Restore folder?

 

[drdebit]

ditto carr and metalliczombie

Our company had a network of 12-15 computers infected.
The boss' computer guy came in on a saturday and ran the norton program on all pcs. To the best of my knowledge, that fixed it and he did not have to do any file reconstruction or restores. We did find the infection fairly early though, so I don't know if that is a result you could expect too.

 

[Metaliczombi]

From memory I recall that file restoration and registry hacks had to be done only if the infection was not found early enough . The utility seemed to work @ my company where there is about 100 pc's or so on the network. There were a few that this virus had imbedded itself pretty deep where manual removal of certain files was needed. Of course the virus spread rapidly from 1 d/l attachment to an email. they have since improved their virus defintion updating on all the pc's. Not a fun virus seems to spread fairly fast but pretty easy to get rid of.