Re: virurs/worm

From: David H. Lipman (DLipman~nospam~_at_Verizon.Net)
Date: 10/29/04 

Date: Fri, 29 Oct 2004 06:30:12 -0400

Go to friends PC and obtain Sysclean then burn a CDROM

1) Download the following two items...

        Trend Sysclean Package
         http://www.trendmicro.com/download/dcs.asp

         Latest Trend signature files.
         http://www.trendmicro.com/download/pattern.asp

Create a directory.
On drive "C:\"
(e.g., "c:\New Folder")
or the desktop
(e.g., "C:\Documents and Settings\lipman\Desktop\New Folder")

Download SYSCLEAN.COM and place it in that directory.
Dowload the signature files (pattern files) by obtaining the ZIP file.
For example; lpt222.zip

Extract the contents of the ZIP file and place the contents in the same directory as
SYSCLEAN.COM.

2) If you are using WinME or WinXP, disable System Restore
        http://vil.nai.com/vil/SystemHelpDocs/DisableSysRestore.htm
3) Reboot your PC into Safe Mode
4) Using the Trend Sysclean utility, perform a Full Scan of your platform and
        clean/delete any infectors found
5) Restart your PC and perform a "final" Full Scan of your platform
6) If you are using WinME or WinXP, Re-enable System Restore and re-apply any
        System Restore preferences, (e.g. HD space to use suggested 400 ~ 600MB),
7) Reboot your PC.
8) If you are using WinME or WinXP, create a new Restore point
9) Please report back your results

Dave

"matteo" <matteo@discussions.microsoft.com> wrote in message
news:AB8D59A2-85D3-4C40-A872-02FAA42BC033@microsoft.com...
| i would if i could download! any other idea is ther a application i can buy!
| thanx for responding though
|
|
| "Wannabe A+" wrote:
|
| > On Thu, 28 Oct 2004 15:59:02 -0700, matteo wrote:
| >
| > > I had mcafee firewall and there a/v software up and running no problem till I
| > > got this message from mcafee notiffing me of a medium risk virus so i did an
| > > up date and installed !
| >
| > Did you get this message in an email?
| >
| > > right after that i started to notice that my computer started to act funny
| > > (not letting me click on my start button and not letting me launch mcafee a/v
| > > it finally by the end of the day was just not doing what i wanted so i
| > > formatted the hard drive and reinstalled xp and re installed mcafee !
| > > now i now i have not downloadedd any thing so why is my computer doing it
| > > all over again ?
| > > oh i almost forgot my sys. restore will not let me turn it off and i cant
| > > launch mcafee and i cand download anny of the updates froe windows update!
| > >
| > > is this a virus or a worm? and is it in my memory ?
| > > dose any one know how i am supposed to fix this problem?plese help
| >
| > ? Boot your AV recovery disk(s) and run AV, fix everything
| >
| > ? If you do not have recovery disks, Boot into Safe Mode and run your AV
| > software. Fix everything it identifies. Make note of any problems that it
| > cannot repair
| >
| > ? Clear all temporary files and folders: recycle bin, temporary Internet
| > files, the Windows TEMP folder, and the MSDOWNLOAD.temp folder by running
| > Disk Cleanup at Start>All Programs>Accessories>System Tools>Disk Cleanup
| >
| > ? Boot Windows
| >
| > ? Download Spybot S&D at
| > http://www.safer-networking.org/en/download/index.html and Ad-Aware at
| > http://www.lavasoftusa.com/support/download/. Check for new definitions,
| > and download them. Verify Spybot-S&D>Settings>Ignore products>All products
| > and uncheck items that have a check mark (red or green). Run Spybot S&D and
| > Ad-Aware. Fix everything
| >
| > ? If that does not fix the problem use two or more of these sites and run
| > an online Virus Scan. Check the "Automatically Fix" box.
| > http://housecall.trendmicro.com/
| > http://www3.ca.com/virusinfo/virusscan.aspx
| > http://www.pandasoftware.com/activescan/com/activescan_principal.htm
| > http://www.bitdefender.com/scan/license.php
| > http://us.mcafee.com/root/mfs/default.asp
| > http://security.symantec.com/sscv6/default.asp?productid=symhome&langid=ie&venid=sym
| > http://www3.ca.com/virusinfo/virusscan.aspx
| >
| > Post your results on this newsgroup.
| >
| >
| >

Loading