Re: help with removing hostkill trojan

From: Tieu (Hey.D_at_Not-Spam.Me)
Date: 06/14/05

  • Next message: David H. Lipman: "Re: Windows 2000 Server Problem"
    Date: Tue, 14 Jun 2005 09:54:58 -0400
    
    

    Hi Dave,

      I am trying to get into Internet Options but I got this message: "Your
    Current Security Settings Prohibit running ActiveX controls on this page. As
    a result, the page may not display correctly." and I only see blank screen.
    Can I fix this in windows registry? Thanks again.

    Tieu.

    "David H. Lipman" <DLipman~nospam~@Verizon.Net> wrote in message
    news:%232YD02HcFHA.3492@TK2MSFTNGP14.phx.gbl...
    > From: "Tieu" <Tieu@discussions.microsoft.com>
    >
    > | Hi,
    > |
    > | Norton shows that my system is infected with Bat.HostKill Trojan. When
    I
    > | plug my Network cable in, it seems like it receving something from the
    > | Internet and a bunch of I.E. windows poped up asking me to install
    Service
    > | Pack 3, Service Pack 4...
    > |
    > | I updated lastest Virus Definition and scanned the whole system in Safe
    Mode
    > | but Norton didn't find anything. Then when I switched back to Normal
    Mode,
    > | and Norton detected HostKill again. I followed instruction on the Norton
    Site
    > | for HostKill but it didn't help. What are other names of this Trojan
    detected
    > | as in other AV software? Thanks in advance.
    > |
    > | OS: Win2k.
    >
    > Dump the contents of the IE Temporary Internet Folder cache (TIF)
    > Start --> Settings --> Control Panel --> Internet Options --> Delete Files
    >
    > Dump the contents of the Mozilla FireFox Cache { if you use FireFox }
    > Tools --> Options --> Privacy --> Cache --> Clear
    >
    > Download MULTI_AV.EXE from the URL --
    > http://www.ik-cs.com/programs/virtools/Multi_AV.exe
    >
    > It is a self-extracting ZIP file that contains the Kixtart Script
    Interpreter {
    > http://kixtart.org Kixtart is CareWare } two batch files, four Kixtart
    scripts, one Link
    > (.LNK) file, this PDF instruction file and two utilities; UNZIP.EXE and
    WGET.EXE. It will
    > simplify the process of using up to 3 different Anti Virus Command Line
    Scanners to remove
    > viruses and various other malware.
    >
    > C:\AV-CLS\StartMenu.BAT -- { or Double-click on 'Start Menu' in C:\AV-CLS}
    > This will bring up the initial menu of choices and should be executed in
    Normal Mode. This
    > way all the components can be downloaded from each AV vendor's web site.
    > On Win9x/ME the choices are; Trend, McAfee, Exit the menu and Reboot the
    PC
    > On NT4, Win2k, WinXP and Win2003 Server the choices are; Sophos, Trend,
    McAfee, Exit the
    > menu and Reboot the PC.
    >
    > You can choose to go to each menu item and just download the needed files
    or you can
    > download the files and perform a scan in Normal Mode. Once you have
    downloaded the files
    > needed for each scanner you want to use, you should reboot the PC into
    Safe Mode [F8 key
    > during boot] and re-run the menu again and choose which scanner you want
    to run in Safe
    > Mode. It is suggested to run the scanners in both Safe Mode and Normal
    Mode.
    >
    > When the menu is displayed hitting 'H' or 'h' will bring up a more
    comprehensive PDF help
    > file.
    >
    > To use this utility, perform the following...
    > Execute; Multi_AV.exe { Note: You must use the default folder C:\AV-CLS }
    > Choose; Unzip
    > Choose; Close
    >
    > Execute; C:\AV-CLS\StartMenu.BAT
    > { or Double-click on 'Start Menu' in C:\AV-CLS }
    >
    > NOTE: You may have to disable your software FireWall or allow WGET.EXE
    and/or FTP.EXE to go
    > through your FireWall to allow them to download the needed AV vendor
    related files.
    >
    > * * * Please report back your results * * *
    >
    >
    > --
    > Dave
    > http://www.claymania.com/removal-trojan-adware.html
    > http://www.ik-cs.com/got-a-virus.htm
    >
    >


  • Next message: David H. Lipman: "Re: Windows 2000 Server Problem"

    Relevant Pages

    • Re: New Virus hiding in OS?
      ... The submission will then be tested against many different AV vendor's scanners. ... FireWall to allow it to download the needed AV vendor related files. ... This will bring up the initial menu of choices and should be executed in Normal Mode. ... It is suggested to run the scanners in both Safe Mode and Normal Mode. ...
      (microsoft.public.security.virus)
    • Re: Something hijacking URLs and directing browser to porno site
      ... provides scanners for; ... This will bring up the initial menu of choices and should be executed in Normal Mode. ... You can choose to go to each menu item and just download the needed files or you can ... It is suggested to run the scanners in both Safe Mode and Normal Mode. ...
      (alt.comp.anti-virus)
    • Re: New Virus hiding in OS?
      ... The submission will then be tested against many different AV vendor's scanners. ... FireWall to allow it to download the needed AV vendor related files. ... This will bring up the initial menu of choices and should be executed in Normal Mode. ... It is suggested to run the scanners in both Safe Mode and Normal Mode. ...
      (microsoft.public.security.virus)
    • Re: Virus Attack??
      ... This will bring up the initial menu of choices and should be executed in Normal Mode. ... You can choose to go to each menu item and just download the needed files or you can ... It is suggested to run the scanners in both Safe Mode and Normal Mode. ...
      (microsoft.public.win2000.general)
    • Re: has anyone found trojan-backdoor-soundcheck ?
      ... The following tool provides scanners from; McAfee, Sophos, Trend Micro and Kaspersky. ... This will bring up the initial menu of choices and should be executed in Normal Mode. ... You can choose to go to each menu item and just download the needed files or you can ... It is suggested to run the scanners in both Safe Mode and Normal Mode. ...
      (alt.comp.anti-virus)

    Loading