Re: Trogan - StartPage-DU... and RESTORE FILES
From: David H. Lipman (DLipman~nospam~_at_Verizon.Net)
Date: 08/04/04
- Previous message: Jurren Bouman: "AVERT Low-Profiled Threat Notice: W32/Evaman.c@MM"
- In reply to: Tom: "Re: Trogan - StartPage-DU... and RESTORE FILES"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]
Date: Wed, 4 Aug 2004 16:46:54 -0400
Thanx Tom for the reply and information.
Dave
"Tom" <anonymous@discussions.microsoft.com> wrote in message
news:c0ac01c47a32$57b06cf0$a601280a@phx.gbl...
| REPLY to Dave -
| Thanks for the information but it did not cure the
| problem.
| Talked with McAfee again and they opened a case for me
| and will have a senior tech call me back. It appears
| this "StartPage-DU" trogan is hard to nail down.
| Again thanks.
| I will post fix once I get one.
| Tom
|
|
|
| >-----Original Message-----
| >1) Disable System Restore
| >
| http://vil.nai.com/vil/SystemHelpDocs/DisableSysRestore.ht
| m
| >2) Reboot your PC into Safe Mode
| >3) Using your AV software, perform a Full Scan of
| your platform and clean/delete any
| > infectors found
| >4) Restart your PC and perform a "final" Full Scan
| of your platform
| >5) Re-enable System Restore and re-apply any System
| Restore preferences,
| > (e.g. HD space to use suggested 400 ~ 600MB),
| >6) Reboot your PC.
| >7) Create a new Restore point
| >8) Please report back your results
| >
| >Dave
| >
| >
| >
| >
| >"Tom" <anonymous@discussions.microsoft.com> wrote in
| message
| >news:82a301c477f3$bf03c4b0$a401280a@phx.gbl...
| >| Somewhere I picked up a Trogan named "StartPage-DU". It
| >| does not seem to be causing any problems. McAfee finds
| >| the infected dll file, but can't find the actual
| >| virus/trogan.
| >|
| >| After talking with McAfee and making sure all
| protection
| >| is current it seems that the virus/trogan may reside in
| >| the "RESTORE" area of XP. Theory is that the computer
| >| comes up "clean" when scanned, but later on, next start
| >| up, etc., it appears again.
| >|
| >| McAfee's solution for now was to turn OFF the RESTORE
| >| feature and see what happens.
| >|
| >| I was thinking of deleting ALL the backup RESTORE files
| >| once I believe the system is clean. HOW DOES ONE FIND
| >| THESE FILES ??
| >|
| >
| >
| >.
| >
- Previous message: Jurren Bouman: "AVERT Low-Profiled Threat Notice: W32/Evaman.c@MM"
- In reply to: Tom: "Re: Trogan - StartPage-DU... and RESTORE FILES"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]
Relevant Pages
|
