Re: Bloodhound virus

From: Mike Fisher (MikeFisher_at_discussions.microsoft.com)
Date: 08/24/05 

Date: Tue, 23 Aug 2005 17:07:03 -0700

I'll give it a try. Part of the problem is that I can't access the internet.
I downloaded MULTI_AV.EXE and burned it to a CD but I can't see how it's
going to connect to complete the other needed downloads.

"David H. Lipman" wrote:

> From: "Mike Fisher" <MikeFisher@discussions.microsoft.com>
>
> | Norton reported i was infected with bloodhound.w32.ep
> | The symptoms:
> | my computer wouldn't boot up in regular mode; wall paper replaced with black
> | screen, task manager says explorer and other programs not responding, task
> | manager is jammed with dozens of <unknown> or Popuper programs. Get messages
> | that system resources are dangerously low.
> | system restore will not work
> | Started in safe mode -- computer would not recognize cd drive to run norton
> | antivirus by cd. it would not run norton from the hard drive, giving me an
> | error message that indicated my wininet.dll file was missing or corrupted.
> | I changed my boot sequence to start with the cd drive. Norton ran from disk
> | (2004 edition) for six hours before reporting it had not found any virus.
> | I tried to get on the internet from safe mode but could not.
> | Restarted in safe mode and deleted a file i found called popuper.
> | System now boots but will run almost no programs, including norton or
> | internet connection or spybot, saying wininet.dll file is missing or
> | corrputed and, often, that the path to the program's exe file cannot be
> | found.
> |
> | Any help would be appreciated.
>
>
> Download MULTI_AV.EXE from the URL --
> http://www.ik-cs.com/programs/virtools/Multi_AV.exe
>
> It is a self-extracting ZIP file that contains the Kixtart Script Interpreter {
> http://kixtart.org Kixtart is CareWare } three batch files, five Kixtart scripts, one Link
> (.LNK) file, a PDF instruction file and two utilities; UNZIP.EXE and WGET.EXE. It will
> simplify the process of using; Sophos, Trend and McAfee Anti Virus Command Line Scanners to
> remove viruses, Trojans and various other malware.
>
> C:\AV-CLS\StartMenu.BAT -- { or Double-click on 'Start Menu' in C:\AV-CLS}
> This will bring up the initial menu of choices and should be executed in Normal Mode. This
> way all the components can be downloaded from each AV vendor’s web site.
> The choices are; Sophos, Trend, McAfee, Exit the menu and Reboot the PC.
>
> You can choose to go to each menu item and just download the needed files or you can
> download the files and perform a scan in Normal Mode. Once you have downloaded the files
> needed for each scanner you want to use, you should reboot the PC into Safe Mode [F8 key
> during boot] and re-run the menu again and choose which scanner you want to run in Safe
> Mode. It is suggested to run the scanners in both Safe Mode and Normal Mode.
>
> When the menu is displayed hitting 'H' or 'h' will bring up a more comprehensive PDF help
> file.
>
> To use this utility, perform the following...
> Execute; Multi_AV.exe { Note: You must use the default folder C:\AV-CLS }
> Choose; Unzip
> Choose; Close
>
> Execute; C:\AV-CLS\StartMenu.BAT
> { or Double-click on 'Start Menu' in C:\AV-CLS }
>
> NOTE: You may have to disable your software FireWall or allow WGET.EXE to go through your
> FireWall to allow it to download the needed AV vendor related files.
>
> * * * Please report back your results * * *
>
>
> --
> Dave
> http://www.claymania.com/removal-trojan-adware.html
> http://www.ik-cs.com/got-a-virus.htm
>
>
>

Relevant Pages

  • Re: pop up across desktop
    ... Thanks, Steve T. ... download it and upgrade immediately then press Scan Your Computer button ... in normal mode; found 7 infections and cleaned them ... It did not find anything in Safe Mode after. ...
    (microsoft.public.windowsxp.general)
  • Re: Getting a warning NOTICE
    ... To go back to Normal Mode, ... A description of the Safe Mode Boot options in Windows XP ... You can choose to go to each menu item and just download the needed files ... Follw up with a HJT scan: ...
    (microsoft.public.windowsxp.general)
  • Re: Getting a warning NOTICE
    ... Do you wnat to injstall AntiSpware Suite to scan your PC for malware now? ... To go back to Normal Mode, ... A description of the Safe Mode Boot options in Windows XP ... You can choose to go to each menu item and just download the needed files ...
    (microsoft.public.windowsxp.general)
  • Re: possible spyware problems
    ... | The problems I am running into is sometimes when i try to open Internet ... This will bring up the initial menu of choices and should be executed in Normal Mode. ... You can choose to go to each menu item and just download the needed files or you can ... It is suggested to run the scanners in both Safe Mode and Normal Mode. ...
    (microsoft.public.windowsupdate)
  • Re: computer invaded toded with .pf and modem hijacked
    ... Before cleaning download this: ... Use that should cleaning out your PC remove or damage your in-place winsock ... and you can't connect to the internet. ... Make sure you pay attention to the part about doing your scan in safe mode. ...
    (microsoft.public.windowsxp.security_admin)