Re: Last ditch question
From: robin (robin_at_tintagelonline_NOSPAM_.com)
Date: 09/23/03
- Next message: helper: "Re: TROJAN HORSE"
- Previous message: juli: "sporky"
- In reply to: Bill Sanderson: "Re: Last ditch question"
- Next in thread: Bill Sanderson: "Re: Last ditch question"
- Reply: Bill Sanderson: "Re: Last ditch question"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]
Date: Tue, 23 Sep 2003 09:29:25 -0700
Hello kind folks,
I'm willing to do as much as necessary. It sounds as
though you understand the problem I am having. Although I
am a bit rusty on the DOS stuff, I can follow detailed
instructions. Do you have any more detailed instructions,
such as command lines, for what you propose? I would be
very grateful. Thanks to everybody for their responses.
It's nice to know I'm not alone, stuck with a $2500
paperweight.
R~
>-----Original Message-----
>How much work are you willing to do:
>
>I manually removed such an infection on Friday morning on
a WinMe machine.
>
>I booted with a dos diskette.
>
>I ran Smartdrv
>
>I exported the registry to a text file on the C drive.
>
>Restarted in safe mode.
>
>Used wordpad to edit the text file according to Norton's
descriptions of the
>registry changes made by the Swen virus.
>
>restarted from Dos floppy
> ran smartdrv
>imported the registry from the text file
>
>This worked just fine. At the end of the day, when
Norton released an
>automated cleaner, it found a couple of files and
registry entries I'd
>missed or ignored.
>
>You can do this--it is slow and tedious and fairly risky,
in terms of
>errors--but very possible.
>
>It helps to know the name the Swen executable has on your
machine--AVG has
>given you that, I think.
>
>
>"robin" <robin@tintagelonline_nospam_.com> wrote in
message
>news:b80401c38183$8d59fe50$a601280a@phx.gbl...
>> Thank you "helper." You have been quite helpful,
actually.
>> Unfortunately, I have not had enough luck with AVG. It
>> enabled me, eventually, to get back to my windows ME
>> desktop, but few of the .exe's work. I can't even get
into
>> the registry.
>>
>> When AVG scanned in DOS, it found 9 instances of Swen,
but
>> did some pretty weird stuff when I tried to heal the
>> files. I couldn't use my mouse, and when I tried to use
>> the arrow keys to "select all," it would actually
deselect
>> the files then perform another scan, showing the same 9
>> files still existing. At least, it enabled me to get
back
>> to my desktop, but it is clear to me that Swen is still
on
>> my laptop. This virus is a bitch, and whoever made it
>> should be.... well, you decide.
>>
>> Do you know of any utility fixes that might work from
the
>> real DOS prompt?
>>
>> R~
>>
>>
>>
>>
>> >-----Original Message-----
>> >Have you tried creating "Rescue Disk" in AVG?
>> >As i heard it helped someone here on this list.
>> >It's under:
>> >Service | Create Rescue Disk
>> >It needs 3 disks.
>> >
>> >"robin" <robin@tintagelonline_NOSPAM_.com> wrote in
>> message
>> >news:09f501c38174$cbd15930$a401280a@phx.gbl...
>> >> Does anyone know of a fix for swen that will run from
>> the
>> >> real DOS prompt? I have tried FixSwen and Stinger,
but
>> >> they will not run from real DOS. I have also run AVG,
>> >> which detected 9 virus files, but would not let me
>> select
>> >> and clean them.
>> >
>> >
>> >.
>> >
>
>
>.
>
- Next message: helper: "Re: TROJAN HORSE"
- Previous message: juli: "sporky"
- In reply to: Bill Sanderson: "Re: Last ditch question"
- Next in thread: Bill Sanderson: "Re: Last ditch question"
- Reply: Bill Sanderson: "Re: Last ditch question"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]
Relevant Pages
|
