win2k, viruscan and kletz = impossible to eliminate the file

[Guest_imported]

I’ve a problem with eliminating w32/klez.h@MM
I’ve Viruscan 6.0, win2K and Incredimail. Although I’ve administrator privileges, when I get the klez in email attachments, viruscan tells me that “It’s impossible to eliminate the file “_#im_Temporary_#im_.imm”. Check the right to the support that contains the file”. The only way out is to Stop checking, which allows the virus to execute (Just after I hit the stop checking button it immediately comes out a windows saying if I want to save or to execute the file!!!! This is extremely dangerous!! Is it possible that I can’t erase the file?

 

[bygeek]

Generally, the KLEZ virus cannot be removed by normal virus scanners. You must use a fix tool for the specific virus. Download the fix from the Symantec website and make sure you run it in SAFE MODE. It should find and repair or delete infected files and registry entries.

Try this link:

http://securityresponse.symantec.com/avcenter/venc/data/w32.klez.removal.tool.html

 

[petermeachem]

Nortons strips out the virus bit with no problem. We get two klez a day currently! Peter Meachem
peter @ accuflight.com

 

[williambishop]

You have to make sure to turn off the save before clean option in the AV software to prevent reinfecting yourself though......