I-Worm/Klez.H removal instructions. The I-Worm/Klez.H virus is spreading in e-mails with one or two attachments. The first one is the actual virus, the second can be a randomly chosen file from infected computer. The virus exploits a security hole (IFRAME exploit), by which it can be activated on some systems just by previewing the infected message. This variant is equipped by a mechanism that give the virus ability to recode parts of itself after each run and unlike the older versions it doesn't contain any destructive payload. I-Worm/Klez removal instructions: 1.. If you have an infected computer plugged to a LAN, it have to unplug it first, and plug it again when all computers are cleaned. 2.. This virus can be removed only in the MS-DOS or Safe mode. 3.. Some files cannot be removed if the virus is found in an archive. You have to note the file name and then remove it later manually from the disc. For detection of the virus I-Worm/Klez.H you need update of AVG number 350 and for detection of Win32/Elkern you need update 351. Full details can be found at: www.grisoft.com/html/news/klezh.htm#klezh_removal Brian Staffordshire, UK List Admin www.lordbramhall.co.uk --- Outgoing mail is certified Virus Free. Checked by AVG anti-virus system (http://www.grisoft.com). Version: 6.0.351 / Virus Database: 197 - Release Date: 19/04/2002