How to clean this machine!!!??

[LawyerRon]

I’m helping a friend rid his kid’s Dell of an assortment of viri, Trojans, worms, spyware, etc. I went to “housecall” at Trend Micro’s site to do an online virus scan and so far it’s found about 400 files infected with Worm Klez H, MS Blast, and one other virus it was able to clean. The Worm Klez H is marked “non-cleanable” , as is MSBlast. I believe there’s a patch to get rid of MSBlast but what, short of a reformat, can be done about the Klez the worm?

[mairving]

Instead of cleaning the file, try deleting them. Some files though when they become infected, will change the attributes of the file to a System/Hidden file which most virus scanners can't delete. You have to manually delete those files by opening up a command prompt and changing the attibutes of the file and then deleting it. This is works for me:

attrib -H -S filename
del filename

Still it takes awhile to fix those.

[Panama Red]

The klez worm had a fix at the Norton site when it was more prevalent. May want to check there, Ron. Found it. Here's the link to the removal tool.
http://securityresponse.symantec.com/avcenter/venc/data/w32.klez.removal.tool.html

[Panama Red]

Another thought just occured to me. You can boot from a Norton AV disk or System disk and do a complete AV check and clean before booting. That's assuming you have a Norton software available.

[Redo40]

Downlload and run Symantec's removal tool, I have used it several times, gets rid of it everytime.

[glc]

Symantec has Klez and MSBlast removal tools. Trend Micro has a generic removal tool for just about anything called Sysclean, it works in conjunction with the latest pattern files. Note that Sysclean can take hours to scan a whole system.

http://www.trendmicro.com/download/tsc.asp

[LawyerRon]

Thanks folks, I'll check it out.

[LawyerRon]

OK, I used the cleaning tools posted and the system works great! Thanks for the help!