Re: 6 viruses on 2 files

anonymous_at_discussions.microsoft.com
Date: 12/01/03 

Date: Sun, 30 Nov 2003 19:46:34 -0800

Dave -

I understand completely and appreciate your assistance.

A funny thing happened with the TaskManager. When I hit
Ctrl-Alt-Delete a quick message flashed to auto hide the
TaskManager. When I pass over the little icon in the
system tray (the box in the lower right of my computer
taskbar) the green box which I think signifies the
TaskManager disappears. I opened it 5 times in a row, and
got the auto hide thing each time. I had 5 green boxes
all in a row and when I passed my mouse over them, they
each disappeared.

I visited the sites you specified earlier this weekend and
was unable to find the strings I was supposed to delete.

Do I have any hope?

Mike

>-----Original Message-----
>Mike:
>
>We can't assume what you mean nor read your mind so the
following was extremely important to
>note..
>
>| By "thorwing a rod" I mean every time I run NAV, it
>| reports that these files are infected and cannot delete
>| them b/c "access is denied".
>
>
>Try hitting "Ctrl-Alt-Del" and bring up the TaskManager.
Look through the list of running
>applications.
>Do you see w32x386u ?
>If you do see it in the list, shut it down then delete
the file in the dllcache directory.
>
>Please read the following URLs:
>http://securityresponse.symantec.com/avcenter/venc/data/ba
ckdoor.irc.cloner.html
>http://securityresponse.symantec.com/avcenter/venc/data/w3
2.tzet.worm.html
>
>http://securityresponse.symantec.com/avcenter/venc/dyn/273
81.html
>http://securityresponse.symantec.com/avcenter/venc/dyn/360
96.html
>http://securityresponse.symantec.com/avcenter/venc/data/ir
c.trojan.html
>
>Dave
>
>
><anonymous@discussions.microsoft.com> wrote in message
>news:031701c3b7b0$e315ce10$a501280a@phx.gbl...
>| By "thorwing a rod" I mean every time I run NAV, it
>| reports that these files are infected and cannot delete
>| them b/c "access is denied".
>|
>| The viruses are W32.Tzet.Worm, BAT.Trojan,
>| Backdoor.IRC.Cloner, IRC.Backdoor.Trojan and IRC Trojan.
>|
>| I am not that computer savvy but it appears that NAV (I
>| have the the 2004 version) wiped out all the other files
>| harmed by these viruses except the two I noted below.
>|
>| You are correct it is WINNT and not WINNIT.
>|
>| I double checked the file - it's 0313.INS, whatever that
>| means. If I run properties on that particular file, it
>| tells me that "access is denied" and all the above
>| mentioned viruses are tagged again by NAV.
>|
>| What do I do?
>|
>| >-----Original Message-----
>| >Mike:
>| >
>| >What does "...Norton software is throwing a rod over
>| these two files" mean ?
>| >
>| >If you are using NAV, what is the name of the viruses
>| that NAV calls it/them ?
>| >
>| >Are you using NT4 ?
>| >
>| >Is this a mistype "WINNIT/System32/dllcache" and should
>| read "WINNT/System32/dllcache" ?
>| >
>| >I haven't heard of any infector infecting .INS files.
Is
>| this a typo and do you mean
>| >0313.ini (.INI) file ?
>| >
>| >You really haven't supplied enough information to help
>| you...yet.
>| >
>| >Dave
>| >
>| >
>| >
>| >"Mike" <anonymous@discussions.microsoft.com> wrote in
>| message
>| >news:036b01c3b7ad$01df9140$a301280a@phx.gbl...
>| >| I'm cooked. I have two files in
>| WINNIT/System32/dllcache
>| >| and they are w32x386u.exe and 0313.ins and they are
both
>| >| chock full of viruses. My Norton software is
throwing a
>| >| rod over these two files. Are they safe to delete?
Are
>| >| they Microsoft files? Please help.
>| >
>| >
>| >.
>| >
>
>
>.
>

Relevant Pages

  • Re: 6 viruses on 2 files
    ... Obviously the Trojan is masking the use of the TaskManager. ... The Trojan has to be loaded somehow. ... |>| By "thorwing a rod" I mean every time I run NAV, ... |>| harmed by these viruses except the two I noted below. ...
    (microsoft.public.security.virus)
  • Re: Is XNews a Vector for Malware?
    ... Does anybody know if XNews provides a portal for viruses to sneak ... I run AVG Free resident, and also manually scan the entire ... I'd used NAV for many years before this last ...
    (comp.security.firewalls)
  • Regsvr.exe locks me out of task manager and regedit
    ... I deleted the attachment file and performed a scan with NAV, ... Then I tried regedit and got a similar error. ... the lockout value to 1 on task manager, but I was unable to fix it ... taskmanager and found REGSVR.EXE, which I killed. ...
    (alt.comp.anti-virus)
  • Re: computer lags at start up
    ... Well assuming that you have a decent amount of RAM and decent CPU speed... ... Check for viruses using housecall.trendmicro.com ... Purchase NAV and then uninstall mcafee ...
    (microsoft.public.windowsxp.hardware)
  • Re: 6 viruses on 2 files
    ... | By "thorwing a rod" I mean every time I run NAV, ... | harmed by these viruses except the two I noted below. ... |>I haven't heard of any infector infecting .INS files. ...
    (microsoft.public.security.virus)