Oregon Magazine  Kick the habit at  Serenity Lane
   Cover  |  Table of Contents


 
The Virus Doctor

(Update: June 5, 2002, an email warning about the virus and offering a cure is circulating.  Do not use the link in that file!!  It will infect your machine with KLEZ.  Only use the software you get below.  Here's a copy of the fake email that contained the virus.
 
 

carolinabirds-owner wrote:

Klez.E is the most common world-wide spreading worm. It's very dangerous by corrupting your files.Because of its very smart stealth and anti-anti-virus technic,most common AV software can't detect or clean it. We developed this free immunity tool to defeat the malicious virus. You only need to run this tool once,and then Klez will never come into your PC.

NOTE: Because this tool acts as a fake Klez to fool the real worm,some AV monitor maybe cry when you run it. If so,Ignore the warning, and select 'continue'. If you have any question,please mail to me.

Do not use the link in that email !!!   Now to the original Virus Doctor text.

OMED: I received the following message from (I think) my server:
 

Sender, InterScan has detected virus(es) in your e-mail attachment.

Date: Fri, 26 Apr 2002 16:39:17 +0200
Method: Mail
From:   <hobbit@pcez.com>
To:     info@bonifatiuswerk.de
File:   pauline@webfile[2].pif
Action: clean failed - deleted
Virus:  WORM_KLEZ.G

   Now, as I read that, it means I sent them a virus. 
   So, I called my server and read the message to a pleasant fellow named, John.  He said the message meant that a virus aimed at me had been stopped by them before it got to me.
   To doublecheck, I emailed the message above to another of the technicians at my server -- an unpleasant fellow named Marcus who thinks I am crazy.  I trust unpleasant people who think I am crazy.
   Marcus said that he had talked it over with John, and come to the conclusion that the message meant what I originally thought  -- that I had been infected and the server had caught the virus when I sent an outgoing message.

   He told me to get the program that would fix it, which is at:
http://www.symantec.com/avcenter   A little way down that page, I found a link that sent me to the page for W32.Klez.H@mm.  There, another link sent me to the page where one downloads the actual software  that checks a computer for the virus. (And, I suppose, eliminates it and fixes altered files.)
   My machine was clean, which means neither John nor Marcus was correct, but yours may be infected, since some versions of this nasty little bug apparently can get inside when you open an email.  You don't have to click on an executable file to get it.  Just looking at your mail can infect you.
   So, for those of you who like me think computer people are from Boolea, and so are incapable of communicating in English, here's how it works.
   If you're running Windows95 just follow the directions below.  It may be that simple for Windows98, too, but I don't know about that.  If you run ME, or something with '2000' in the name, you'll have to shut off some function which I have never heard of, run the fix program and then turn that strange function back on.  The virus page discusses that, but it's all Greek to me.. So, good luck if you're saddled with that.  But, for those of us who run Model-T software, here's the English version of what you do.

Make a destination folder, then download the fix

In my case, I clicked on Start, slid to  Programs and Windows Explorer, then clicked on that.  I went to C:MAINDIR/Computer and made a new folder there called Virus.  You can make a folder called Virus right in C if you like.  Do it as follows.  Inside Windows Explorer (your file manager), click on C.  It will turn blue.  Go up to the top of the page with your mouse arrow and click on file, then slide through new, to folder.  Click on it.  Type the word Virus and hit ENTER on your keyboard.  You now have a folder with the address C:/Virus  Minimize your Windows Explorer window (or "X" it closed) and tell the web page you want to download the virus program
   A small window will pop up.  You can click your way to your new Virus folder.  When that is the destination listed on your screen you're cooking with gas.  Clicking Go, Okay or whatever the action command is, will send the virus detection software into that folder. 

Opening in Safe Mode

Once you've done that, close all programs until you're looking at your desktop, then restart your machine in "Safe mode."  This means in most cases you hit "start," "restart" and  "shut down."   Soon the screen will turn black.  At that time start hitting the F5 key, up there at the top of your keyboard. When the screen turns to color, stop doing it.   If you are successful with your timing, the computer will start in Safe Mode. 

Then you hit "start" and go back to your file access system ('Windows Explorer, usually) and to the folder where you saved the virus program.  When you open (by clicking) that folder, the virus fix command file will appear in the box at the right.  Double click on it and it will run.  If it finds anything, it will let you know.  It might even fix any bad files if you ask it nice.
   Voila!  You, the terrified non-nerd,  have just made a folder, downloaded files into it, then sent them off to save your digital bacon.  Tell that to your kids and you'll see admiration in their eyes for the first time since you fixed the toaster by drop-kicking it the full length of the driveway.

LL

©2002 Oregon Magazine


 
      Around Oregon News Digest  |  Arts&Lettres  |  Business  |  Editorial  |  Events  | Life&Styles
      Natural History  |  Outdoor   |  SciTech  |   Sports  |  Travel  |  Peg's Bottom Gazette  |  Contact