klez worm

[bj nick]

I have a computer in my classroom that is not connected to the internet, but now has the klez worm. I suspect that some kids inserted a floppy that may have brought it; I don't really know. But anyway, "fixklez" won't work because I always get an "illegal operation" message followed by a message that I cannot have access, and that I need to "speak to the system administrator" or something like that. I suspect that this is as a result of the klez's anti-anti-virus functions. Any ideas? it is not doing anything serious, but it won't go away, and of course removing the KAK.HTA entries in either startup or the registry won't work; it always comes back.

 

[TonyKlein]

When exactly are you getting this "access denied" error message?

When attempting to run FixKlez?

Do other applications run?

 

[Del]

A friend of mine got the klez, I downloaded the fix, put in on a c.d. and ran it on her machine. That fixed it, then updated the AV software.

 

[bj nick]

I get the "illegal error" message when I try to run fixklez.

all the apps run fine and there are no problems with the machine, except that on startup I get the "open with" dialog box, which is annoying. Nothing else appears to be affected. as I mentioned, it is not connected to the Internet. again, fixklez won't work.

 

[TonyKlein]

Would you please do this:

Go to http://www.spywareinfo.com/downloads.php#startup , and download 'Startuplist'.

Transfer it to the affected computer.

Unzip, doubleclick it, and it will generate a text file that will list all running processes, all applications that are loaded automatically when you start Windows, and more.

Go to Edit > select all, copy it and post the contents here.