klez.h beats up AVG

[capybara]

last week, i loaded a friends computer with winxp and downloaded AVG from
grisoft.com. with AVG up and running, and the system on the internet, AVG gave a notice it
was getting a virus (worm or whatever)
called klez.h. scanning for virus
showed 171 infected files. repeated runs with AVG could not remove it.
WaRnInG = AVG does not block, and
cannot remove klez.h.
=============================
ps = i have always used AVG in the past
and recommended it to many people.
I ASSUMED it works well. inspite of
my personal XP-erience, you will see this at AVG free edition page at grisoft:
QUOTE
"We have received the VB100% in the test of Virus Bulletin in November 2003 on Windows 2003 Server platform.
100% detection rate of AVG Anti-Virus System is continuously certified by independent ICSA laboratories."

[Rocketmech]

I've had 2 run ins with the Klez on my personal pc. Both times AVG stopped it. The 1st time my wife was at the helm and I didn't know until a few days later she had a virus until she complain of issues in her profile. Using mine presented none. Anyways, AVG stopped it but the Klez damaged AVG in the process when it tried to disable AVG, something alot of major virii do these days , successfully I might add . I had to reinstall AVG to clean it . The next time AVG found and cleaned it before it was activated.
You need to use the Virus Vault to delete the files. If your already infected then AVG may be disabled, and you'll need to install a cleaner or AVG again to clean the system. Be sure to run a FULL SCAN , and disable system restore if your running XP.

BTW, theres not a AV out there thats 100% full proof. Practice Safe Hex .

[BipolarBill]

Another good free AV program:

http://www.free-av.com/

[fishybawb]

Originally posted by BipolarBill
Another good free AV program:

http://www.free-av.com/

The server can be a little temperamental at times - there's a regularly updated mirror at http://www.micro.com/antivirus.html that seems much more reliable.

[capybara]

on my original thread at anandtech, someone else said klez got past their AVG
also, so im not the only one
see
http://forums.anandtech.com/messagev...readid=1192508

[Rocketmech]

Your missing the point . It wouldn't have if the system was updated.

[capybara]

but it was updated. this was a new install of windows,
a new install of a new download
of AVG ,
and it got the virus the very next
day.

[Rocketmech]

The Klez H is activated by opening the attachment, whether by clicking or by vulnerability. http://www.microsoft.com/windows/ie/...08/default.asp

Check your system settings:
Set your email program to not open in preview or automatically.
Dont open attachments or d/l files until scanned.
Set AVG to scan email , use the plug in .
Set AVG to use Heuristics
Keep AVG and Windows Updated.
Perform a full scan daily.

Regardless of all these precautions, virii can still get past an AV. It happens. You hear about it here at Sysopt about how Norton, AVG, McAfee, etc. did'nt stop this or that virus and they were updated. But was the system setup and operated safely. Just because you have a dog watching the house outside doesn't mean you can leave the doors unlocked.
I looked back at why the wife got infected. Turns out she was AIM'g (multi windows) , OE was open, OE was set to recieve every 1 min. , OE was set to open in preview, OE was set to allow attachments. I'm not sure if Windows had the above patch or not. Doomed.
I'll have you know its not that way anymore. And we still run AVG free on all our systems. And I feel secure.
If you feel uncomfortable using AVG , go with another. But, don't say it doesn't work.

[capybara]

Originally posted by capybara
on my original thread at anandtech, someone else said klez got past their AVG
also, so im not the only one
see
http://forums.anandtech.com/messagev...readid=1192508

ok, RM, defend AVG all u want, use it all u want, im ok with that. cheers.