Re: agobot ...
From: David H. Lipman (DLipman~nospam~_at_Verizon.Net)
Date: 01/18/05
- Next message: Joseph Scalise: "Virus? Crapware? Deletes Trusted Root Certs."
- Previous message: David H. Lipman: "Re: Does anyone keep track?"
- In reply to: mys: "agobot ..."
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]
Date: Tue, 18 Jan 2005 08:59:06 -0500
1) Download the following three items...
Trend Sysclean Package
http://www.trendmicro.com/download/dcs.asp
Latest Trend signature files.
http://www.trendmicro.com/download/pattern.asp
Adaware SE (free personal version v1.05)
http://www.lavasoftusa.com/
Create a directory.
On drive "C:\"
(e.g., "c:\New Folder")
or the desktop
(e.g., "C:\Documents and Settings\lipman\Desktop\New Folder")
Download SYSCLEAN.COM and place it in that directory.
Download the Trend Pattern File by obtaining the ZIP file.
For example; lpt359.zip
Extract the contents of the ZIP file and place the contents in the same directory as
SYSCLEAN.COM.
2) Update Adaware with the latest definitions.
3) If you are using WinME or WinXP, disable System Restore
http://vil.nai.com/vil/SystemHelpDocs/DisableSysRestore.htm
4) Reboot your PC into Safe Mode and shutdown as many applications as possible.
5) Using both the Trend Sysclean utility and Adaware, perform a Full Scan of your
platform and clean/delete any infectors/parasites found.
(a few cycles may be needed)
6) Restart your PC and perform a "final" Full Scan of your platform using both the
Trend Sysclean utility and Adaware
7) If you are using WinME or WinXP,Re-enable System Restore and re-apply any
System Restore preferences, (e.g. HD space to use suggested 400 ~ 600MB),
8) Reboot your PC.
9) If you are using WinME or WinXP, create a new Restore point
* * * Please report back your results * * *
-- Dave http://www.claymania.com/removal-trojan-adware.html "mys" <mys@discussions.microsoft.com> wrote in message news:10413BD4-4ACA-48AE-A398-5E3D62FF2A46@microsoft.com... | Hi | | I have noticed that in all my network shares a file "testfile" 0k. I did | some research. | What I came up with that it is something to do with this agobot. I did | download a few removal tools from symantec and sofhos but it seems to presist. | | Problem: | As soon as that "testfile" replicate in the network shares the network | printers start printing until switched off and the untitled print job has | been deleted from the print queue. | On the printed paper it seems like an msdos command! | Did reinstall printer drivers to ensure that is working 100% Can print | normal. This printing problem will occurr when no print job as been send to | printer, network cable unpluged user not even at desk. | Please help!!!
- Next message: Joseph Scalise: "Virus? Crapware? Deletes Trusted Root Certs."
- Previous message: David H. Lipman: "Re: Does anyone keep track?"
- In reply to: mys: "agobot ..."
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]
Relevant Pages
|
