Re: What is this? Created 12/27/2003
From: Margaret (anonymous_at_discussions.microsoft.com)
Date: 01/13/04
- Next message: vega: "blaster worm"
- Previous message: Will: "Virus through NTP protocol"
- In reply to: Bill Sanderson: "Re: What is this? Created 12/27/2003"
- Next in thread: Bill Sanderson: "Re: What is this? Created 12/27/2003"
- Reply: Bill Sanderson: "Re: What is this? Created 12/27/2003"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]
Date: Tue, 13 Jan 2004 09:00:58 -0800
I talked to McAfee and they suggested the scan for viruses
in DOS. They gave me instructions on to do this. They said
it would solve the problem with this virus but I could
lose all infected files. I don't know that I want to do
that.
BTW thanks for the helpful info.
>-----Original Message-----
>If McAfee, with the latest definitions, isn't picking
anything up, I would
>suggest either or both of the online scans I mentioned.
>
>Don't install Grisoft's AVG--stick with McAfee.
>
>Check that McAfee is up to date--that you have the latest
virus
>definitions--and that it is set to scan all files.
>
>If you are able to capture any one of these executables
that you mention,
>it'd be great to submit them to:
>
>https://www.webimmune.net/default.asp
>
>
>"Margaret" <anonymous@discussions.microsoft.com> wrote in
message
>news:0ab001c3d9e9$94ffb820$a501280a@phx.gbl...
>>I have McAfee Virus scan and it doesn't pick this virus
>> up. Do you suggest that I use one of the ones you told
me
>> about in your reply?
>>>-----Original Message-----
>>>This is a virus.
>>>
>>>It could be Swen, but there are lots of other
>> possibilities. There is some
>>>process that runs at startup that creates these randomly
>> named (but always
>>>date/timed as you mention) executables. While the
>> machine is running, these
>>>executables are in use, so you can't delete them.
>>>
>>>If I understand you correctly, this file is requesting
>> permission from your
>>>firewall to access the Internet (or rather, your
firewall
>> is detecting it
>>>attempting this access!) Definitely refuse that
>> permission.
>>>
>>>Scan all files on your machine with an antivirus program
>> with current
>>>definitions.
>>>
>>>If you don't have antivirus in place, Grisoft provides a
>> free version of
>>>their AVG program for individuals here:
>>>
>>>http://www.grisoft.com/us/us_dwnl_free.php
>>>
>>>Or, you can do an online scan from most antivirus
vendors-
>> -for example,
>>>trend micro:
>>>
>>>http://housecall.antivirus.com
>>>
>>>or Symantec/norton
>>>
>>>http://security.symantec.com
>>>
>>>See what the result of such scans is--write down the
name
>> of what is found.
>>>Write back with that result, and also if there is any
>> difficulty cleaning
>>>it.
>>>
>>>
>>>
>>>"Margaret" <anonymous@discussions.microsoft.com> wrote
in
>> message
>>>news:055001c3d9e4$a42fe900$a001280a@phx.gbl...
>>>>I get this new program alert that a new program wants
to
>>>> accesss my pc. It reinvents itself with different
>> letters
>>>> and numbers but it is always 12/27/2003 1800hrs 00mins
>> and
>>>> 16sec. I always deny access but whenever I turn my pc
on
>>>> it comes up again with different letters & #'s. Only
the
>>>> most recent one let's you look at the proprieties all
>> the
>>>> others say Windows cannot find a file. So I remove
them
>>>> but I can't remove the most recent one. (Where does it
>> go
>>>> when I remove the older ones) When I locate in the
>> Windows
>>>> folder it won't let me delete it. It says windows is
>> using
>>>> this file.
>>>> Anyone have this problem and how do you get rid of it?
>>>> Thanks for any help in this matter.
>>>
>>>
>>>.
>>>
>
>
>.
>
- Next message: vega: "blaster worm"
- Previous message: Will: "Virus through NTP protocol"
- In reply to: Bill Sanderson: "Re: What is this? Created 12/27/2003"
- Next in thread: Bill Sanderson: "Re: What is this? Created 12/27/2003"
- Reply: Bill Sanderson: "Re: What is this? Created 12/27/2003"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]
Relevant Pages
|
