Page 1 of 1
2 more Clients with Klez virus... :(
Posted: Sun May 19, 2002 6:26 pm
by FlyingPenguin
I hope they find the guy who wrote this and string him up.
Damn thing is a MAJOR pain to remove. Thankfully it doesn't do much irreperable damage, but all we need now is some script kiddie to make a nastier version if this guy shares his work.
Yeah, I know I make money off of virus removal jobs, but this this one is TEDIOUS to remove, and there's more than enough money to be made without dealing with viruses (I actually see very few viruses - most of my clients us a virus scanner).
Posted: Sun May 19, 2002 6:47 pm
by DocSilly
Hehe, yeah, a nasty lil bugger ... I guess you are using the klez removal tools?
I just had a chat early this morning with an ICQ buddy in Australia who got hit by Klez, he had 1300 infected files.
There're always new virii on it's way to your HDD, like the newly discovered
Worm.Kazaa.Benjamin , the very first virus (actually a rather harmless worm) to be spread via a P2P network ... just a matter of time before real malware will be distributed via P2P.
Posted: Sun May 19, 2002 7:07 pm
by FlyingPenguin
AHHH!! been waiting for a Klez toolkit! Thanks Doc! I checked on Friday but they must have posted it after I checked.
That should help. It's TEDIOUS doing it manually.
Posted: Sun May 19, 2002 7:19 pm
by DocSilly
Ewww, manually = not the win
Here the direct link for all those hit by klez:
click here
I think this one has been around for some time from Symantec, no idea about NAI (McAfee).
Posted: Sun May 19, 2002 7:36 pm
by FlyingPenguin
Hmmm. I checked both McAfee and Symantec a couple of times last week and didn't see them.
This one was updated on Friday apparently.
Posted: Sun May 19, 2002 11:37 pm
by Executioner
What do you guys think of Quick Heal?
http://www.quickheal.com/default.htm
They are suppose to be pretty good, and better than McAfee and Norton.
Posted: Mon May 20, 2002 12:35 am
by FlyingPenguin
Never heard of them. I'll have to look into that.
I personally use McAfee but only because it's completely transportable and can be run from DOS. Since I do service work, it's invaluable for me to be able to just copy the McAfee DOS engine folder to a CD-R every week and then I can scan a client's system from DOS or a DOS window without installing an anti-virus program (which may not be possible anyway if the system's infected).
Ya can't do that with Norton.
However, McAfee is a lot more user un-friendly (IMO) than Norton. It asks FAR too many technical questions during an installation or an update - it scares the bejeebus outta the computer novices. Initial install also takes a LONG time (it has to download a LOT of updates the first time around - on a modem it takes forever).
Norton works more transparently and although it also requires a big initial update download, it's not quite as bad. I generally recommend Norton to my clients unless they like a touchy-feely virus scanner.
I also personally don't like McAfee Firewall (which is included with VScan 6, although you can elect not to install it if you do a custom install). A lot of novices have problems with it, and frankly I think ZoneAlarm is better.
If I remove a virus from a client's system, I'll generally either recommend they go out and buy NAV, or if they have broadband I'll convince them to buy it online and set it up for them.
Some people have used McAfee in the past (I'll often come across a system that has Vscan 3 or 4 installed, which is no longer supported) and if they want to stick with McAfee I'll convince them to go buy Vscan 6 (sans firewall) or get it online.
If they stubbornly refuse to buy a virus scanner, I at least tell them to regularly scan their system with the free scanner here:
http://housecall.antivirus.com/
Posted: Mon May 20, 2002 2:26 pm
by Executioner
The reason I mentioned Quick Heal is it caught viruis that Norton would not, even one in my email from almost a year ago.