Re: Unknown Virus

From: CT04 (CT04_at_discussions.microsoft.com)
Date: 06/25/05 

Date: Sat, 25 Jun 2005 09:40:01 -0700

To both Dave and Crouchie1998

Good news...finally managed to resolve everything and now have Norton
Internet Security loaded and LiveUpdate is running - finally! Had a few
problems with that but cracked it. Dave, I downloaded the removal tool you
recommended on Thursday so no, wouldn't have your latest one. Crouchie1998,
I had him download the Mytob removal tool for his variant and it came up with
no infection. Looks like Dave's tool did the trick first time out the
blocks!

Anyway guys, my mate Dave is as happy as a pig in the hot smelly stuff and
my/our thanks to you for your help and advice. I hope he has learned his
lesson and won't download and open questionable attachments in future.

Cheers, CT

"David H. Lipman" wrote:

> From: "CT04" <CT04@discussions.microsoft.com>
>
> | Dave
> |
> | Thanks for the advice. Carried out the instructions and identified he had
> | W32.MYTOB.GEN@MM. We initially had problems getting McAfee, Sophos or Trend
> | to download anything. Both Sophos and Trend came up with the message "Bad
> | File Descriptor" - whatever that all means? Each time we selected the
> | appropriate option number, a directory was created but nothing else happened.
> | Eventually we were able to get the McAfee one to download and ran it. Ought
> | we to have downloaded from each of the vendors sites or would just the one
> | suffice? What I wasn't clear about is what to do once the scan was completed
> | and the virus reported to have been removed. We have since been able to load
> | his new Norton Internet security 2005 but can't get the damn LiveUpdate to
> | run. It tells us that there are lines in the Host file which is causing the
> | problem. I checked the Host file and there is only one entry - 127.0.0.1
> | localhost, yet the Norton report explaining why LiveUpdate won't run contains
> | a list of enteries. Right now I am banjaxed as to how to resolve this. I
> | got him to download the Symantec Mytob fix tool and run it in the hope it may
> | repair or clean up and legacy problems left over from the virus. Meanwhile,
> | thanks for your help.
> |
> | CT
>
>
> CT:
>
> I don't know when you downloaded the Multi AV front end but I just updated it last nite.
> You might want to download the newer version, run the self extracter and then run the Start
> Menu again and see if Trend and Sophos will work correctly.
>
>
> --
> Dave
> http://www.claymania.com/removal-trojan-adware.html
> http://www.ik-cs.com/got-a-virus.htm
>
>
>

Relevant Pages

  • Re: Hard Disk Problem
    ... "Lil' Dave" wrote: ... HDDScan, there is a folder that took about 15-30 seconds to access, it ... 2.Does using torrents to download some files, ...
    (microsoft.public.windowsxp.hardware)
  • Re: Is there a tools to clean Trojan-psw ?
    ... Thx Dave for the tool! ... | FireWall to allow it to download the needed AV vendor related files. ... | download the files and perform a scan in Normal Mode. ... It is suggested to run the scanners in both Safe Mode and Normal ...
    (microsoft.public.security.virus)
  • Re: Win32 Ulysses2 virus warning
    ... | | So I rebooted again into regular mode and did the scan again and the same ... | |> Download SYSCLEAN.COM and place it in that directory. ...
    (microsoft.public.windowsxp.security_admin)
  • Re: Internet Explorer has been hijacked by "About:Blank"
    ... "Dave Throop" wrote in message ... First eliminate any spyware. ... Dealing with Unwanted Malware, Parasites, Toolbars and Search Engines ... Alternative download pages for Ad-Aware, Spybot, HijackThis and CWShredder ...
    (microsoft.public.windows.inetexplorer.ie6.browser)
  • Re: Unknown Virus
    ... | Internet Security loaded and LiveUpdate is running - finally! ... Dave, I downloaded the removal tool you ... | lesson and won't download and open questionable attachments in future. ...
    (microsoft.public.security.virus)