PDA

View Full Version : win32 klez (W98)



bidner
03-26-2002, 09:31 AM
i have antivirus (norton)
it detects the win32 klez-E
and delete it,
but it keeps showing again and again!
i have outlook 2000
what can i do?

everywhere you are
give somthing,
get something.

TonyKlein
03-26-2002, 10:29 AM
Hi,

Here's the article:

<a target="_blank" href=http://www.antivirus.com/pc-cillin/vinfo/virusencyclo/default5.asp?VName=WORM_KLEZ.E>W32.Klez.E worm</a>

It's probably still in Startup, which is why it keeps coming back.

Go to Start/run, and type Regedit.

Navigate to HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Curr entVersion\Run, where you'll probably find an entry called Wink + a couple of other letters (like Winkdeu, Winkcqp, etcetera)

Rightclick on the line containing Wink* in the right pane, and choose 'delete'.

Now reboot, and delete the file by that name you'll find in your Windows\System folder.

That ought to take care of your errors.

You may also find a registry subkey by that name in HKEY_LOCAL_MACHINE\System\CurrentControlSet\Servic es.

If you do, make sure you delete that Wink* subkey as well.

Good luck, Tony

bidner
03-31-2002, 07:25 AM
i didnt find any traces of the virus on my computer!
but i get the virus by e mail and the antivirus stops it.
i think it sends itself from other computer by my name!
because i get a lot of e mails from mail admins that some e mail i sent has not reached the e mail.
but i didnt sent them!

everywhere you are
give somthing,
get something.

TonyKlein
03-31-2002, 09:32 AM
This is because, although you're not infected yourself, people you know, and that have your email address in their address books, are infected.

The virus then proceeds to send infected email messages to everyone in the address book, and that includes you.

There's not much you can do about this, but fortunately you're well protected yourself.

Good luck, Tony