Problem with W32.ElKern.4926

[Nick Weisser]

Hi all

I'm using NAV 8.0 (2001) which seems not be able to cope with the above
mentioned Virus. I tried to follow the instructions on
http://securityresponse.symantec.com/avcenter/venc/data/w32.klez.removal.too
l.html, but I can't start W2K in save mode in order to run the FixKlez file
(removal tool). After pressing F8 and chosing save mode W2K will not
continue to load after some time. I also tried save mode with DOS prompt
which does not work either.

Has anyone got some experience with Klez and ElKern respectively?

Thanks for any help!

Regards
Nick

 

[Zvi Netiv]

I'm using NAV 8.0 (2001) which seems not be able to cope with the above
mentioned Virus. I tried to follow the instructions on
http://securityresponse.symantec.com/avcenter/venc/data/w32.klez.removal.too
l.html, but I can't start W2K in save mode in order to run the FixKlez file
(removal tool). After pressing F8 and chosing save mode W2K will not
continue to load after some time. I also tried save mode with DOS prompt
which does not work either.

Go to http://invircible.com/item/72 and run the ToggleMode utility from the
server (http://invircible.com/download/togglmod.exe). This should let you
toggle between safe mode with command prompt and normal mode.

Read the instructions on the above page before proceeding.

Has anyone got some experience with Klez and ElKern respectively?

Plenty.

Regards, Zvi

 

[Nick Weisser]

Thanks for the hint, Zvi. I'll try that.

Go to http://invircible.com/item/72 and run the ToggleMode utility from the
server (http://invircible.com/download/togglmod.exe). This should let you
toggle between safe mode with command prompt and normal mode.

Read the instructions on the above page before proceeding.


Plenty.

Regards, Zvi

--
NetZ Computing Ltd. ISRAEL http://invircible.com (e-mail address removed)
InVircible Virus Defense Solutions, ResQ and Data Recovery Utilities
E-mail sent in reply to this post will not be considered private and
will be answered in the newsgroup. Top posting is not appreciated!