Re: Cannot remove virus

From: Stuart Reed (sr_at_stureed.co.uk)
Date: 04/29/05


Date: Fri, 29 Apr 2005 13:17:26 GMT

Hi David

Thanks for your help but there was a problem with Sysclean: I couldn't
download a missing file LPT$VPN.*

Stuart

"David H. Lipman" <DLipman~nospam~@Verizon.Net> wrote in message
news:OLOQC$KTFHA.3556@TK2MSFTNGP10.phx.gbl...
> From: "Stuart Reed" <sr@stureed.co.uk>
>
> | I have acquired Trojan.Vundo.B (Object Name:
> | C:\Windows\REGIST~\cabplay.dll)
> |
> | I have followed the Symantec removal procedure in Safe Mode, including
> | regedit, without success. I also tried reverting my hard drive with
Norton
> | GoBack but it would not revert to a time prior to the infection.
> |
> | Any help gratefully appreciated.
> | Stuart Reed
> |
> Dump the contents of the IE Temporary Internet Folder cache (TIF)
> Start --> Settings --> Control Panel --> Internet Options --> Delete Files
>
> Dump the contents of the Mozilla FireFox Cache
> Tools --> Options --> Privacy --> Cache --> Clear
>
> 1) Download TrendMicro Sysclean by one of the following 2 methods
>
> Trend Sysclean Method 1
> ---------------------------------------
> Trend Sysclean Package
> http://www.trendmicro.com/download/dcs.asp
>
> Latest Trend signature files.
> http://www.trendmicro.com/download/pattern.asp
>
> Create a directory.
> On drive "C:\"
> (e.g., "c:\sysclean")
>
> Download SYSCLEAN.COM and place it in that directory.
> Download the signature files (pattern files) by obtaining the ZIP file.
> For example; lpt604.zip
>
> Extract the contents of the ZIP file and place the contents in the same
directory as
> SYSCLEAN.COM.
>
> Trend Sysclean Method 2
> ---------------------------------------
> Download the utility SYSCLEAN_FE at the following URL --
> http://www.ik-cs.com/got-a-virus.htm
> SYSCLEAN_FE automates the download and execution process of the Trend
Sysclean Package.
> Direct URL --
> http://www.ik-cs.com/programs/virtools/Sysclean_FE.exe
>
> 2) Download and install Ad-aware SE (free personal version v1.05)
> http://www.lavasoftusa.com/
> 3) Update Adaware with the latest definitions then exit the software.
> 4) Disable System Restore
> http://vil.nai.com/vil/SystemHelpDocs/DisableSysRestore.htm
> 5) Reboot your PC into Safe Mode and shutdown as many applications as
possible
> 6) Using the Trend Sysclean and Ad-aware SE utilities, perform a Full
Scan of your
> platform and clean/delete any infectors found
> 7) Restart your PC and perform a "final" Full Scan of your platform
using both Trend
> Sysclean and Ad-aware SE
> 8) Re-enable System Restore and re-apply any System Restore
preferences,
> (e.g. HD space to use suggested 400 ~ 600MB),
> 9) Reboot your PC.
> 10) Create a new Restore point
>
> * * * Please report back your results * * *
>
> --
> Dave
> http://www.claymania.com/removal-trojan-adware.html
> http://www.ik-cs.com/got-a-virus.htm

>



Relevant Pages

  • Re: JS:Isbar [Trj]
    ... you detailed before booting into Safe Mode and running Sysclean_ FE.bat. ... The files seemed to download satisfactorily but I got an error message ... > Trend Sysclean Package ... > 6) Reboot your PC into Safe Mode and shutdown as many applications as possible. ...
    (alt.computer.security)
  • Re: Possible Trojan/Worm
    ... | On my main XP Home PC, which is providing Internet access to another PC ... | trying again, which eventually means XP reaches it's port limit, gives ... Download TrendMicro Sysclean by other of the following 2 methods ... Trend Sysclean Package ...
    (microsoft.public.security.virus)
  • RE: computer shuts down shortly after connnecting, help please
    ... You must clean up the computer before trying to install SP2 on it. ... And yes, you can download ... From a different, clean machine download Stinger ... After you've run Stinger and/or Sysclean and removed spyware as ...
    (microsoft.public.windowsxp.general)
  • Re: Desparate for help!!!!!!
    ... | possible as some of the sites I am working with require IE6. ... Other javascripts work just fine. ... Trend Sysclean Package ... Download SYSCLEAN.COM and place it in that directory. ...
    (alt.computer.security)
  • Re: Virus problem
    ... | screen a open file security warning comes up about a file called svhost.exe. ... What can I do to clear the virus off my machine? ... Trend Sysclean Package ... Download SYSCLEAN.COM and place it in that directory. ...
    (microsoft.public.security.virus)