Re: Bloodhound.exploit.6 Trojan

From: Lon (anonymous_at_discussions.microsoft.com)
Date: 08/28/04

  • Next message: Jessica: "Not Blaster OR Sasser" 
    Date: Fri, 27 Aug 2004 21:02:13 -0700

    Thanks Chris for getting back to me but again I can't
    seem to pull up and read your last post for 08-27-04 at
    7:18. Don't know what is wrong. Would it be too much
    trouble to copy and paste again? Would really appreciate
    it as I am sure the answer to my question is in that
    post.

    >-----Original Message-----
    >Not bad for your first experience with virus... :-)
    >
    >I was told that when you disable and unable your system
    restore and follo
    >the steps as you did virus disappear...
    >
    >
    >"Lon" <anonymous@discussions.microsoft.com> escribió en
    el mensaje
    >news:a98001c487ff$d93c6280$a401280a@phx.gbl...
    >> I am using Windows XP Pro sp1 with IE6.0 and NSW2003
    with
    >> NAV and Yahoo Anti-spy and spyblocker. Today my NAV
    >> program informed me I had a virus on my computer called
    >> Bloodhound.exploit.6 that they could not fix. I found
    the
    >> site
    >>
    www.symantec.com/avcenter/venc/data/pf/trojan.trunlow.html
    >> for the removal procedures, printed them off and
    >> followed the steps given. This is what I did:
    >> 1. Disabled System restore
    >> 2. Updated my NAV definitions by running live update
    >> 3. Ran a full system virus scan to check for
    >> Trojan.Trunlow files and found none. (was told if any
    >> trojan/trudlow files found to delete and if not to
    delete
    >> value in registry)
    >> 4. Went off line and then backed up the entire registry
    >> and placed it on my desktop
    >> 5. went to start/run/type regedit and steps told me to
    >> search for key
    >>
    HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersi
    >> on\Run and on the right side panel to delete the
    >> value "Microsoft Eventlog"-"%Windir%\Winupdate.exe"
    >> ........I got to this step but when I went into
    >> start/run/type regedit I found the HKEY_LOCAL_MACHINE
    >> folder on left side and on the right side the only
    thing
    >> it said was Default REG_SZ value not set. I didn't
    do
    >> anything or find anything just
    >> 6. Exited registry, rebooted computer, and then enabled
    >> system restore.
    >> 7. Ran Hijackthis and analyzed log and there were no
    red
    >> items found and couldn't find anything with Trojan in
    it.
    >> I also wanted to run full scan again in safe mode
    and
    >> check regedit again, but I couldn't get my computer to
    go
    >> into safe mode. Mine says to hit F1 but when I did
    there
    >> was no selection for safe mode.
    >> Questions:
    >> a. From what I have said above, can someone tell me if
    I
    >> no longer have this bloodhound.exploit.6 virus? And
    how
    >> can I tell if it is gone or not? And if it is gone how
    >> did I get rid of it when I didn't delete anything?
    >> b. What does it mean when it said in regedit Default
    >> REG_SZ no value set
    >> c. How can I get my computer to go into safe mode?
    When I
    >> boot up it says to go to the BIOS click F1 but doesn't
    >> list safe mode.
    >> d. Do I need to run full scan again in safe mode (once
    >> found) and go to regedit again in safe mode?
    >> Didn't mean this to be so long, but have never tried to
    >> get rid of a virus before and just wanted someone to
    let
    >> me know if steps I took were correct and if there is
    >> something else I need to do. I just want to know if it
    is
    >> gone and what I can do to make sure it doesn't come
    >> back. Any advice or help with this would be greatly
    >> appreciated.
    >>
    >
    >
    >.
    >

  • Next message: Jessica: "Not Blaster OR Sasser"

    Relevant Pages

    • Re: Bloodhound.exploit.6 Trojan
      ... Not bad for your first experience with virus... ... I was told that when you disable and unable your system restore and follo ... > into safe mode. ... What does it mean when it said in regedit Default ...
      (microsoft.public.security.virus)
    • Re: Bloodhound.exploit.6 Trojan
      ... was the first time I tried and hopefully removed a virus ... safe mode and ran a full virus scan. ... Disabled System restore ...
      (microsoft.public.security.virus)
    • Re: Bloodhound.exploit.6 Trojan
      ... >the steps as you did virus disappear... ... Disabled System restore ... >> I also wanted to run full scan again in safe mode ... What does it mean when it said in regedit Default ...
      (microsoft.public.security.virus)
    • Re: Windows is corrupted
      ... Have you a System Restore via Safe Mode back to a point when you know ... Good Configuration' - on the same screen as Safe Mode. ... system keeps restarting after a bunch of hours. ... did have a virus about a week back but it got cleared out. ...
      (microsoft.public.windowsxp.general)
    • Re: Needed/Unneeded files
      ... Then turn off System Restore, reboot in Safe Mode (pressing F8 a few ... times while booting). ... Run your virus scan again. ... 4)Reboot in Normal Mode and turn System Restore back on. ...
      (microsoft.public.windowsxp.help_and_support)