Discovered: November 9, 2001
Updated: February 13, 2007 11:39:22 AM
Also Known As: W32/Klez.e@MM, W32/Klez.h@MM, W32/Klez.gen@MM, WORM_KLEZ.E, WORM_KLEZ.G, I-Worm.Klez.e, I-Worm.Klez.h, W32/Klez-E, W32/Klez-G, W32/Klez-H
Type: Worm, Virus
Systems Affected: Windows 2000, Windows 95, Windows 98, Windows Me, Windows NT, Windows XP
Using the removal tool
Symantec Security Response has developed a tool to remove all the known infections of W32.Klez and W32.ElKern.
Click here to obtain the tool. Try this tool first, as it is the easiest way to remove the threats.
Because
W32.Klez.gen@mm is a generic detection that detects variants of W32.Klez, computers infected with W32.Klez.gen@mm have most likely been exposed to either W32.Klez.E@mm or W32.Klez.H@mm. If your computer is detected as infected with W32.Klez.gen@mm, then download and run the tool. In most cases, the tool will be able to remove the infection.
To view an online demonstration on how to download and run this and several other tools,
click here.
If you cannot obtain the tool, then follow the removal instructions in
W32.Klez.E@mm or
W32.Klez.H@mm.
NOTE: If you are using Norton AntiVirus (NAV) 2000/2001/2002, then in most cases, after you remove the virus, you must re-install NAV. For instructions on how to do this, read the document, "
How to restore Norton AntiVirus after removing a virus."
Writeup By: Douglas Knowles