REMOVING KLEZ FROM RESTORE ARCHIVES???

[dag713]

I have the W32.Klez.H@mm quarantined in my pc. The infected files are in my Windows Systems Restore Archives.
I downloaded a removal tool for this virus. Followed all the instructions and when it was done it says I have no Klez virus on my computer. How can I get rid of this virus without having to wipe my hard drive clean and start over?

 

[P1967F]

I feel your pain. Search Symantec for the step by step directions on manual removal of the Klez virus. It is the only way I have found to compleatly remove the virus on syatems with system restore turned on.

 

[crow053]

This worked for me from Kento...
1. Close all open programs.
2. Right-click My Computer on the Windows desktop, and then click Properties.
3. Click the Performance tab.
4. Click File System.
5. Click the Troubleshooting tab.
6. Check Disable System Restore, click OK, and then click Close.
7. Click Yes to restart. This disables the System Restore feature and will purge the contents of the _RESTORE folder when the system is restarted.
8. Then scan the computer and remove any trojans or viruses that may be detected.
9. After doing that repeat steps 1 through 7, except in step 6, uncheck Disable System Restore.

Also see this:

http://support.microsoft.com/default.aspx?scid=kb;EN-US;q263455