Recovering ME after KLez & Elcorn
Results 1 to 8 of 8

Thread: Recovering ME after KLez & Elcorn

  1. #1
    Registered User Orangeman's Avatar
    Join Date
    Aug 2001
    Location
    Sunny Tacoma, WA
    Posts
    3,536

    Recovering ME after KLez & Elcorn

    HI,

    A friend brought over his computer after it was infected by two viruses, Klez and Elcorn. He has a Dell, 700mhz celeron, with WinME.

    When I disinfected it, my AV scanner was able to disinfect the files with Elcorn, but it had to Delete the files with Klez. The deleted files were located in the C:\Restore\Temp\folder.

    While the process was going on I was using an old monitor that still works but is 7 years old. It worked fine with a Windows 95 computer.

    However after the post and splash screen I receive nothing but video distortion. It looks like an old B&W 1960's TV set with its 'fine tuning' control turned too far to the right. It is still like that now.

    Is this a problem with the specific monitor I am using, or did Klez delete my monitor drivers. If Klex deleted the monitor drivers, how can I restore the drivers if I can't see anything on the picture after the post?


    Thanks,
    Orangeman
    Last edited by Orangeman; January 22nd, 2003 at 11:49 PM.
    Bouncy Bouncy

  2. #2
    Registered User
    Join Date
    Jan 2001
    Posts
    339
    Dell has all dirvers for their machines on their web site:

    https://support.dell.com/register.aspx

    Choose system type and go from there.

  3. #3
    Registered User Orangeman's Avatar
    Join Date
    Aug 2001
    Location
    Sunny Tacoma, WA
    Posts
    3,536
    Thanks Votan,

    Orangeman

  4. #4
    Driver Terrier NooNoo's Avatar
    Join Date
    Dec 2000
    Location
    UK
    Posts
    31,824
    Boot to safe mode and check device manager... delete any and all monitors there and let windows reboot to normal and reinstall a driver.

  5. #5
    Registered User Orangeman's Avatar
    Join Date
    Aug 2001
    Location
    Sunny Tacoma, WA
    Posts
    3,536
    That makes sense NooNoo. Thanks

    Does WinME boot to SafeMode by pressing F8 like Win98?

    Orangeman

  6. #6
    Driver Terrier NooNoo's Avatar
    Join Date
    Dec 2000
    Location
    UK
    Posts
    31,824
    Yes

    F8 is common to all windows operating systems, except those starting 1, 2 or 3

  7. #7
    Registered User meatwad's Avatar
    Join Date
    Oct 2002
    Location
    Numba 1 in tha hood G
    Posts
    3,835
    You might want to get the kleztool removal utility and run it once, just to make sure that you got all of the virus. That is, if you haven't already. Fsecure has one on their site and so does Norton and Kaspersky.

  8. #8
    Registered User Orangeman's Avatar
    Join Date
    Aug 2001
    Location
    Sunny Tacoma, WA
    Posts
    3,536
    Thanks MeatWad,

    aready got it,

    Orangeman

Bookmarks

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •