Re: Suspected virus/high jack

From: David H. Lipman (DLipman~nospam~_at_Verizon.Net)
Date: 10/03/04 

Date: Sun, 3 Oct 2004 08:57:13 -0400

1) Download the following two items...

        Trend Sysclean Package
         http://www.trendmicro.com/download/dcs.asp

         Latest Trend signature files.
         http://www.trendmicro.com/download/pattern.asp

Create a directory.
On drive "C:\"
(e.g., "c:\New Folder")
or the desktop
(e.g., "C:\Documents and Settings\lipman\Desktop\New Folder")

Download sysclean.com and place it in that directory.
Dowload the signature files (pattern files) by obtaining the ZIP file.
For example; lpt186.zip

Extract the contents of the ZIP file and place the contents in the same directory as
sysclean.com.

2) If you are using WinME or WinXP, disable System Restore
            http://vil.nai.com/vil/SystemHelpDocs/DisableSysRestore.htm
3) Reboot your PC into Safe Mode
4) Using the Trend Sysclean utility, perform a Full Scan of your platform and
        clean/delete any infectors found
5) Restart your PC and perform a "final" Full Scan of your platform
6) If you are using WinME or WinXP,Re-enable System Restore and re-apply any
            System Restore preferences, (e.g. HD space to use suggested 400 ~ 600MB),
7) Reboot your PC.
8) If you are using WinME or WinXP, create a new Restore point
9) Please report back your results

Dave

"Magnus (Sweden)" <Magnus (Sweden)@discussions.microsoft.com> wrote in message
news:DCFB66FC-7579-48D1-9160-0909ECB0AD1D@microsoft.com...
| Short and simple version:
| Suddenly I'm not able to log on with any of the (three) accounts I made on
| my kids computer (and not the admin account running Safe Mode either). When I
| type the password to log on Windows immedietly goes from "Logging on..." to
| "Logging off..." and I'm back at the start screen.
| I'm suspecting virus/high jack or _maybe_ some file that has become corrupt.
| I got the feeling I have to find a fix for it in DOS mode.
| Any ideas?
|
| System information: Win XP (SP1 and security patches), Norton 2004,
| Zonealarm (free version).
|
| thanks

Relevant Pages

  • Re: Internet Traffic
    ... > off system restore, and restart in safe mode to delete these files. ... TrendMicro's Sysclean is an extensive antivirus tool which has the ... Create a new folder on your Desktop or the C: ... Restart your computer in Safe Mode. ...
    (microsoft.public.security.virus)
  • Re: heretofind problem
    ... (e.g., "c:\New Folder") ... Download sysclean.com and place it in that directory. ... If you are using WinME or WinXP, disable System Restore ...
    (microsoft.public.scripting.virus.discussion)
  • Re: Need help IE uncrontrollable website access
    ... (e.g., "c:\New Folder") ... Download sysclean.com and place it in that directory. ... If you are using WinME or WinXP, disable System Restore ...
    (microsoft.public.security.virus)
  • Re: Virus in BI.CAB folder
    ... (e.g., "c:\New Folder") ... Download Sysclean.com and place it in that directory. ... Reboot your PC into Safe Mode ... Re-enable System Restore and re-apply any System Restore preferences, ...
    (microsoft.public.windowsxp.security_admin)
  • Re: Problems in restoring the laptop after installing sp2
    ... The only folder under that folder should be the latest version... ... install and update the following software... ... I suggest scanning the system in Safe Mode. ... FireWall to allow it to download the needed AV vendor related files. ...
    (microsoft.public.windowsxp.setup_deployment)