Summary

Aliz worm is relatively easy to disinfect.

1. If you don't have F-Secure Anti-Virus (FSAV from now on) you can download a trial version from our website:

http://www.europe.f-secure.com/download-purchase/

2. If you already have F-Secure Anti-Virus or if you are using a trial version, please download the latest updates from our website:

http://www.europe.f-secure.com/download-purchase/updates.shtml

3. Download and apply Microsoft's security patch against automatic activation of e-mail attachments:

http://www.microsoft.com/windows/ie/downloads/critical/q323759ie/default.asp

4. Restart your system.

5. Scan all your hard drives with FSAV.

a. When FSAV detects the Aliz worm in some file, select 'Delete' disinfection action. This will remove the worm's file from your system.

b. VERY IMPORTANT! If FSAV detects an infection in your e-mail database (PST, MDB and other files), DO NOT delete this file or you will loose all your e-mails. You will need to delete all infected messages from your e-mail database using your e-mail client and then to compact these databases to purge deleted e-mails. After that FSAV will not find infected message any more.

6. After disinfection it is recommended to scan your system with FSAV again to ensure that no infected files are left.

[F-Secure Corporation]