not true cresent, thats why i supplied the utility, it file name is not always krn132, the utitily will scan for the normal klez files, removing them if it can or setting it to remove them on a reboot, then searches for infected files and disinfects them. I ran the utility 4 times because of knowing of past virus activity. the first time it removed the majority of the infections, reboot removed the main klez files, then i ran it again, nothing showed, did the /scanfiles and it began cleaning the klez file infections again. then did the same thing, ran it again after a reboot with /scanfiles and nothing showed. emailed sams, posted the uitility here for others, and that where all this rucus got started. Anyhoo will be waiting to hear back from sams, see if anythings found out, and on to better things.