can klez hide from norton & mcafee (4x)????

I have a klez question.

My sister starting getting emails 4-8 weeks ago warning her that her
computer was emailing messages with klez. At least 15-30 messages from
numerous ISPs warned her to check her PC.

She runs NAV 2K2 w/current virus definitions and it didn't find any
klez, so I suggested another PC infected with klez was just using her
email return address and making it look like she was at fault.

I ran Norton's online version of anti-virus and it didn't find it,
also ran the klex fixtool from norton - it didn't find klez, and
Mcafee's anti-klez tool (stinger) didn't find klez!

Can klez hide from all these anti-virus (& klez) tools and still be on
her PC??? Please advize!

PS - trend-micro's online anti-virus, housecall.antivirus.com, while
scanning for klez, (which it didn't find) activated Norton anti-virus
which warned the PC was infected with the w95.mtx.dr virus - but
regular norton 2002 and online scans found nothing.

I'm confused - all advice is appreciated!!!!

thanks for the confirmation - I thought that was the issue.

If ISPs know about the rampant nature of klez - then they should know
that the emails they send are to people that are not responsible for
originating the virus.

Our second problem is that while using Trend-Micro's online anti-virus
to scan for klez - and only during the TM scan - Norton Anti-virus
comes up warning of w95.mtx.dr. Norton never finds the mtx during
it's regular weekly scan, and we ran the mtx removal tool and it only
flashes for a second with no indicator it did anything...


....so anyone know what may be occuring here???

your help would be appreciated!!!!

Thanks.


"Karel" <karel@nomail.com> wrote in message news:<84iLa.14073$KF1.277111@amstwist00>...
> "jerseyguy957" <jerseycitynj@att.net> schreef in bericht
> news:7eb43067.0306280229.647342ea@posting.google.com...
> > I have a klez question.
> >
> > My sister starting getting emails 4-8 weeks ago warning her that her
> > computer was emailing messages with klez. At least 15-30 messages from
> > numerous ISPs warned her to check her PC.
> >
> > She runs NAV 2K2 w/current virus definitions and it didn't find any
> > klez, so I suggested another PC infected with klez was just using her
> > email return address and making it look like she was at fault.
>
> It is not her PC but otherones that have her e-mail adress in their
> adressbook(s)
> See:
> http://securityresponse.symantec.co....klez.h@mm.html