Company Name:       	Computer Associates International

File Name:          	ClnKlez.com  v. 1.0.1
                                         
Date:               	09/22/2002

Description:        	This stand-alone utility is for the complete cleaning of a
                        local machine from the Win32/Klez.Worm and Win32/WQK virus
                        and all of their variants.
                    
                    	NOTE:  The Klez and WQK viruses infect various application and
                    	       system files and may infect critical operating system
                    	       files needed by Windows to function properly.
                    
                    	In particular, this tool will scan all drives on a local 
                    	system and attempt to:
                    	
                    	1) cure infected viral files
                    	2) delete non-viral files 
                    	3) rename any infected file not cured or deleted
                    	
                    	Infected files will be renamed with an .AVB extension.
                    	
                    	The tool will also perform system cures for both the worm and 
                    	virus.  This involves terminating any running worm/virus 
                    	processes and a registry scan and clean-up.
                               	
                    	NOTE:  Registry entries that do not reference infected files
                    	       are not removed.
           	         	
                    	In addition, this utility will attempt to cure any Klez infected
                    	files through the decompression and restoration of the 
			original host files.
                   
Cleaning Procedure:	Run ClnKlez.com

			Syntax:  D>ClnKlez.com  	

			A detailed log will be made available in the same current 
                   	directory that the utility is run from with a .log extension.
                   
                   	This log should be reviewed carefully and, if possible, 
                   	any renamed files should be restored from a clean backup.