The Mudcat Café TM
Thread #51014   Message #775632
Posted By: Bernard
02-Sep-02 - 01:16 PM
Thread Name: TECH: My computer has a virus
Subject: RE: TECH: My computer has a virus
Steve, it sounds pretty likely that you've got Klez, which is pretty nasty to eradicate.

My laptop became infected with it some while back, but I managed to get rid of it with a bit of mucking around.

First, download the latest 'fix' from Symantec's website (Norton), and follow their instructions.

In particular, you need to run MSCONFIG in 'Safe Mode' and disable any references to files with 'wink' (+ random letters) in their name. You also need to 'find' any files on your computer which mention 'wink', too. Similarly, run REGEDIT and remove all registry entries which refer to something with 'wink'.

Most important - try to find someone with a computer which already has the most up-to-date version of Norton Anti Virus, and the latest virus definitions, and put your hard drive in theirs as a 'D' drive. It's perfectly safe - Klez cannot transmute itself this way. This isn't theory - this is from actual experience.

Run a virus scan on the drive, which will find any infected files - make sure they are deleted, or Klez will simply come back again!

I don't visit Mudcat very often these days, so if you need any more help, e-mail me...