Re: can't remove blaster variant

From: Andreas Strohkirch (webmaster_at_media-networks.de)
Date: 09/19/04 

Date: Sun, 19 Sep 2004 18:19:08 +0200

Hi Dave,

thanx for the tip! By setting the system date to 2004 the virus is stopping
it's activity, but still remains started on the memory. Even after a system
restart the virus is still loaded.

In the meanwhile I scanned the registry after services starting the
svchost.exe. Unfortunately there are so many entries and not even one is
fitting to the descriptions of the anti-virus gurus. So which are the two
services of the virus which should be deleted?

With kind regards,
Andreas Strohkirch.

Relevant Pages

  • Re: Back to Being a Luddite (Oh Well)
    ... because of the need for a firewall and virus protection. ... there's really nothing to relate Internet activity with disk ... CD- recorder "helpers" that sit in your system tray consuming memory ... system tray apps don't consume cycles. ...
    (comp.dcom.telecom)
  • Re: Virus in memory? I may be crazy, but....
    ... | apparently received a virus which was consuming the memory resources of his ... Once infected a repair install is NOT the way to go. ... Once power is removed from RAM, you would kill any virus and it can not exist in volitile ...
    (microsoft.public.security.virus)
  • Re: Virus in memory? I may be crazy, but....
    ... > | apparently received a virus which was consuming the memory resources of his ... > Once infected a repair install is NOT the way to go. ... > Once power is removed from RAM, you would kill any virus and it can not exist in volitile ...
    (microsoft.public.security.virus)
  • Re: VIRTUAL MEMORY
    ... In task manager look at the performance tab and repost the PF Usage ... What virus was ... Hard to know if you dont know about computers I know. ... Are you using one of those memory managers which free up memory. ...
    (microsoft.public.windowsxp.perform_maintain)
  • Re: VIRTUAL MEMORY
    ... each drive / partition. ... > anything because I dont know what I should or should not delete. ... > virus scan both from the nortons that I have and also from live update, ... physical memory. ...
    (microsoft.public.windowsxp.perform_maintain)