W32.Klez.gen@mm - Removal

Risk Level 2: Low

Printer Friendly Page

Discovered: November 9, 2001
Updated: February 13, 2007 11:39:22 AM
Also Known As: W32/Klez.e@MM, W32/Klez.h@MM, W32/Klez.gen@MM, WORM_KLEZ.E, WORM_KLEZ.G, I-Worm.Klez.e, I-Worm.Klez.h, W32/Klez-E, W32/Klez-G, W32/Klez-H
Type: Worm, Virus
Systems Affected: Windows 2000, Windows 95, Windows 98, Windows Me, Windows NT, Windows XP
CVE References: CVE-2001-0154



Using the removal tool
Symantec Security Response has developed a tool to remove all the known infections of W32.Klez and W32.ElKern. Click here to obtain the tool. Try this tool first, as it is the easiest way to remove the threats.

Because W32.Klez.gen@mm is a generic detection that detects variants of W32.Klez, computers infected with W32.Klez.gen@mm have most likely been exposed to either W32.Klez.E@mm or W32.Klez.H@mm. If your computer is detected as infected with W32.Klez.gen@mm, then download and run the tool. In most cases, the tool will be able to remove the infection.

To view an online demonstration on how to download and run this and several other tools, click here.

If you cannot obtain the tool, then follow the removal instructions in W32.Klez.E@mm or W32.Klez.H@mm.

NOTE: If you are using Norton AntiVirus (NAV) 2000/2001/2002, then in most cases, after you remove the virus, you must re-install NAV. For instructions on how to do this, read the document, "How to restore Norton AntiVirus after removing a virus."

Writeup By: Douglas Knowles
Search by name
Example: W32.Beagle.AG@mm
Windows 7
Windows Vista Security