Re: Virus 2

From: David H. Lipman (DLipman~nospam~_at_Verizon.Net)
Date: 04/30/05 

Date: Sat, 30 Apr 2005 06:40:08 -0400

From: "Peter Foldes" <okf22@email.msn.com>

| OK. Got rid of 2 and 3. I am still stuck with the explorer.exe issue. It is
| reporting as a trojan.
|
| Here is the error below that is brought up
|
| explorer.exe-Application Error
| The instructions at xxxxxxx referenced memory at xxxxxxx. The memory could
| not be read.
|
| Click OK to terminate the prog = (This creates a loop (same error)
| with
| different addresses inside and repeats 7 times before starting again with
| first address fault)
|
| Click on cancel to debug the prog = (this brings up my Visual Studio for
| debugging)
|
| OK Cancel
|
| --
| Peter
|
| Please reply to Newsgroup for the benefit of others.
| ------------------------------------------------------------------------------------------
|
| Found viruses on my clients system. How can you remove them
|
| (1) explorer.exe
| (2)SPROT.I (Trojan)
| (3)BKDR THUNK.B
|
| --
| Peter
|
| Please reply to Newsgroup for the benefit of others.
|
| ------------------------------------------------------------------------------------------
| On Fri, 29 Apr 2005 21:57:27 -0400, "Peter Foldes"
| <okf22@email.msn.com> wrote:
|
>> Found viruses on my clients system. How can you remove them
>>
>> (1) explorer.exe
>> (2)SPROT.I (Trojan)
>> (3)BKDR THUNK.B
|
| Use the Sysclean_FE utility from the address below. Please report
| back!
|
| Regards,
| Ian Kenefick
| http://antivirus.ik-cs.com
| ------------------------------------------------------------------------------------------
| an
|
| Running it right now. When done I will post back. It is now on the VSCANTM
| and is reporting back with some Error <-94>
| What does that mean. It also has found the BKDR and was able to delete it
| with the 2nd action. It is continuing its run.
|
| The system that is infected is a W2K3 Server
|

Peter:

Are you reporting that the Sysclean Front End tool cleaned the Trojans or are you reporting
you are still having problems ? 

-- 
Dave
http://www.claymania.com/removal-trojan-adware.html
http://www.ik-cs.com/got-a-virus.htm

Relevant Pages

  • Pdox runtime 9 trojan (not)
    ... Some of my customers have lately been reporting to me that a file I've been ... distributing with a paradox program is infected with a trojan. ... as being infected with TROJ_CIH.DAM by the latest definitions in Trend Micro ...
    (comp.databases.paradox)
  • Re: Virus?
    ... Hey - thanks for reporting back! ... It's educational for the folks reading, ... > Trojan Tooncom.1 ...
    (microsoft.public.scripting.virus.discussion)
  • Virus 2
    ... Please reply to Newsgroup for the benefit of others. ... wrote:>Found viruses on my clients system. ... It is now on the VSCANTM and is reporting back with some Error What does that mean. ...
    (microsoft.public.security.virus)
  • Trojan in TCP Dump
    ... Slashdot.org is reporting the following: ... Trojan Found in libpcap and tcpdump ...
    (NT-Bugtraq)
  • Re: Invaded by trojan
    ... >box reporting that EZ Scan has found that "System Volume ... >trojan" How can I go about deleting this file? ... Remove your system restore point. ...
    (microsoft.public.security.virus)