# W32.Klez.H@mm.enc Virus Removal **URL:** \ **Category:** Factual Questions\ **Created:** [February 13, 2003, 4:58am UTC](https://boards.straightdope.com/t/w32-klez-h-mm-enc-virus-removal/154769 "2003-02-13T04:58:42Z")\ **Posts on this page:** 2\ **Page:** 1
**Author:** ![rayray5884](https://avatars.discourse-cdn.com/v4/letter/r/57b2e6/32.png) [@rayray5884](https://boards.straightdope.com/u/rayray5884)\ **Post date:** [February 13, 2003, 4:58am UTC](https://boards.straightdope.com/t/w32-klez-h-mm-enc-virus-removal/154769/1 "2003-02-13T04:58:42Z")
I have Norton Anti-Virus 2002 running with every update and all virus definition’s loaded. Numerous times throughout the day I’ve been getting a pop-up from Norton saying there is the W32.Klez.H@mm.enc virus. I’ve tried locating the file in the registry per Norton’s online removal process as well as their recommended virus removal tool but nothing works. I can’t find the files and the removal tool detects nothing. Anyone have any suggestions??? Thanks in advance! ---
**Author:** ![Q.E.D](https://avatars.discourse-cdn.com/v4/letter/q/51bf81/32.png) [@Q.E.D](https://boards.straightdope.com/u/Q.E.D)\ **Post date:** [February 13, 2003, 7:15am UTC](https://boards.straightdope.com/t/w32-klez-h-mm-enc-virus-removal/154769/2 "2003-02-13T07:15:15Z")
KLEZ Worm Series Detected: April 2002 Platform: Windows Propagation: Email, web browser, network shares, icq Description: Klez worms pose a high risk and are spreading in epidemic proportions. Right now Klez is the number one virus being blocked by our central gateway antivirus program. Users must also run desktop antivirus software on all their machines to reduce the threat of being infected with the new variants. It is also imperative to patch both Windows and Office with service packs from Microsoft. Disinfection tools: Symantec for these variants: W32.Klez.E@mm, W32.Klez.H@mm, W32.ElKern.3587, and W32.ElKern.4926. This tool is at: > **[Symantec Security Center](https://www.broadcom.com/support/security-center)** > > Symantec security research centers around the world provide unparalleled analysis of and protection from IT security threats that include malware, security risks, vulnerabilities, and spam. avcenter/FixKlez.com Instructions for how to use this tool are at: [http://securityresponse.symantec.com/avcenter/](http://securityresponse.symantec.com/avcenter/) venc/data/w32.klez.removal.tool.html It is important to refer to these instructions before running the tool. F-Secure for everything to date except the E Klez variant: ftp://ftp.europe.f-secure.com/anti-virus/tools/fsklez.exe Kaspersky (look for clrav): > **[Securelist | Kaspersky’s threat research and reports](https://securelist.com/?id=4292)** > > The Securelist blog houses Kaspersky’s threat intelligence reports, malware research, APT analysis and statistics Klez exploits vulnerability in IE. The patch for this is: [www.microsoft.com/windows/ie/](http://www.microsoft.com/windows/ie/) downloads/critical/q290108/default.asp