Re: spp.reg trojan start page virus

From: David H. Lipman (DLipman~nospam~_at_Verizon.Net)
Date: 10/03/04

  • Next message: MAP: "RE: trojan horse dialer"
    Date: Sat, 2 Oct 2004 21:08:19 -0400
    
    

    1) Download the following two items...

            Trend Sysclean Package
             http://www.trendmicro.com/download/dcs.asp

             Latest Trend signature files.
             http://www.trendmicro.com/download/pattern.asp

    Create a directory.
    On drive "C:\"
    (e.g., "c:\New Folder")
    or the desktop
    (e.g., "C:\Documents and Settings\lipman\Desktop\New Folder")

    Download sysclean.com and place it in that directory.
    Dowload the signature files (pattern files) by obtaing the ZIP file.

    Extract the contents of the ZIP file and place the contents in the same directory as
    sysclean.com.

    2) If you are using WinME or WinXP, disable System Restore
                http://vil.nai.com/vil/SystemHelpDocs/DisableSysRestore.htm
    3) Reboot your PC into Safe Mode
    4) Using the Trend Sysclean utility, perform a Full Scan of your platform and
            clean/delete any infectors found
    5) Restart your PC and perform a "final" Full Scan of your platform
    6) If you are using WinME or WinXP,Re-enable System Restore and re-apply any
                System Restore preferences, (e.g. HD space to use suggested 400 ~ 600MB),
    7) Reboot your PC.
    8) If you are using WinME or WinXP, create a new Restore point
    9) Please report back your results

    Dave

    "daddio2" <anonymous@discussions.microsoft.com> wrote in message
    news:07dd01c4a8e4$2804f580$3a01280a@phx.gbl...
    | My computer was hit with a spp.reg trojan start page
    | virus. My wife said there were 2 icons on the explorer
    | toolbar- One said your computer is infected with spyware
    | and when she clicked on them to remove I guess we were
    | infected . I was not home at the time. Now internet
    | explorer doesn't respond also when I try to run spybot I
    | get the message error starting program a required .Dll file
    | msaniDll,was not found. I get the same message after a cold
    | reboot. Any help wold be deeply appriciated.


  • Next message: MAP: "RE: trojan horse dialer"

    Relevant Pages

    • Re: what is fcfB.exe?
      ... Dump the contents of the IE Temporary Internet Folder cache ... Download Sysclean.com and place it in that directory. ... Reboot your PC into Safe Mode and shutdown as many applications as possible ... Re-enable System Restore and re-apply any System Restore preferences, ...
      (microsoft.public.windowsxp.general)
    • Re: mszx23.exe Trojan
      ... (e.g., "c:\New Folder") ... Download Sysclean.com and place it in that directory. ... If you are using WinME or WinXP, disable System Restore ... Reboot your PC into Safe Mode and shutdown as many applications as possible ...
      (microsoft.public.security.virus)
    • Re: System Freeze - 100% CPU Usage
      ... (e.g., "c:\New Folder") ... Download SYSCLEAN.COM and place it in that directory. ... Reboot your PC into Safe Mode and shutdown as many applications as possible ... Re-enable System Restore and re-apply any System Restore preferences, ...
      (microsoft.public.windowsxp.general)
    • Re: 100% CPU Usage
      ... folder probably caused by interference by an AV scan during the Update ... Stop and Disable Automatic Updates, ... Now Reboot Again. ... Go to http://wiki.djlizard.net/Dial-a-fix and download Dial-a-fix ...
      (microsoft.public.windowsupdate)
    • Re: rulechinbait.exe anybody?
      ... (e.g., "c:\New Folder") ... Download Sysclean.com and place it in that directory. ... Reboot your PC into Safe Mode and shutdown as many applications as possible ... Re-enable System Restore and re-apply any System Restore preferences, ...
      (microsoft.public.windowsxp.general)