Re: aim virus: my startup acts like its being used for the first t
From: nv (nv_at_discussions.microsoft.com)
Date: 09/29/05
- Next message: David H. Lipman: "Re: aim virus: my startup acts like its being used for the first t"
- Previous message: David H. Lipman: "Re: Trojan.PWS.Bancos.142"
- In reply to: David H. Lipman: "Re: aim virus: my startup acts like its being used for the first time"
- Next in thread: David H. Lipman: "Re: aim virus: my startup acts like its being used for the first t"
- Reply: David H. Lipman: "Re: aim virus: my startup acts like its being used for the first t"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]
Date: Wed, 28 Sep 2005 15:56:03 -0700
the only virus software i have is norton...should i got ahead with this
anyway? and if so, which one should i choose (ps the trendmicro i ran was the
free online one). does that help more or?
also, i am getting a new virus alert for
Trojan.Elitebar in C:\Windows\etb\nt_hide70.dll
is this related?
"David H. Lipman" wrote:
> From: "nv" <nv@discussions.microsoft.com>
>
> | yesterday, i accidently clicked on a link that was sent over AIM.
> | afterwords, my computer froze and when i restarted the computer was acting
> | like i had never used it before. the default desktop settings were active,
> | the pop-up asking me if i wanted a tour of windows xp. nothing got erased
> | off my computer however when i access a software, it also acts lke i have
> | ever used it before (ie. microsoft office, aim, adobe, internet explorer).
> | and this happens EVERYTIME i restart or start my computer. nothing gets
> | saved.
> | Norton antivirus did not show any virus. I ran Adaware and spybot and
> | deleted and they caught a few thngs but no change. a friend of mine told me
> | to try trendmicro to scan it and it caught 3 virus....which are the same but
> | under 3 different directories...trendmicro then asks me to either delete or
> | pass the file. i dont want to delete it just in case its imprtant....i am
> | SOOO confused.
> | HELP!!!!!!!!!!!!!
> |
> | VIRUS: TROJ_DLOADER.ZT
> | DIRECTORIES:
> | C:\Documents and Settings\Narineh Vartanian\Local Settings\Temporary
> | Internet Files\Content.IE5\6VYZI1QN\director_install[1].exe
> | C:\Program Files\Common Files\InetGet\mc-110-12-0000080.exe
> | C:\Program Files\Common Files\Windows\mc-110-12-0000080.exe
> |
>
> Please download and use the following utility. It containes the Trend Micro Sysclean
> scanners as well as scanners from McAfee and Sophos.
>
> The utility will clean the PC for you.
>
> Download MULTI_AV.EXE from the URL --
> http://www.ik-cs.com/programs/virtools/Multi_AV.exe
>
> It is a self-extracting ZIP file that contains the Kixtart Script Interpreter {
> http://kixtart.org Kixtart is CareWare } three batch files, five Kixtart scripts, one Link
> (.LNK) file, a PDF instruction file and two utilities; UNZIP.EXE and WGET.EXE. It will
> simplify the process of using; Sophos, Trend and McAfee Anti Virus Command Line Scanners to
> remove viruses, Trojans and various other malware.
>
> C:\AV-CLS\StartMenu.BAT -- { or Double-click on 'Start Menu' in C:\AV-CLS}
> This will bring up the initial menu of choices and should be executed in Normal Mode. This
> way all the components can be downloaded from each AV vendor’s web site.
> The choices are; Sophos, Trend, McAfee, Exit the menu and Reboot the PC.
>
> You can choose to go to each menu item and just download the needed files or you can
> download the files and perform a scan in Normal Mode. Once you have downloaded the files
> needed for each scanner you want to use, you should reboot the PC into Safe Mode [F8 key
> during boot] and re-run the menu again and choose which scanner you want to run in Safe
> Mode. It is suggested to run the scanners in both Safe Mode and Normal Mode.
>
> When the menu is displayed hitting 'H' or 'h' will bring up a more comprehensive PDF help
> file.
>
> To use this utility, perform the following...
> Execute; Multi_AV.exe { Note: You must use the default folder C:\AV-CLS }
> Choose; Unzip
> Choose; Close
>
> Execute; C:\AV-CLS\StartMenu.BAT
> { or Double-click on 'Start Menu' in C:\AV-CLS }
>
> NOTE: You may have to disable your software FireWall or allow WGET.EXE to go through your
> FireWall to allow it to download the needed AV vendor related files.
>
> * * * Please report back your results * * *
>
>
> --
> Dave
> http://www.claymania.com/removal-trojan-adware.html
> http://www.ik-cs.com/got-a-virus.htm
>
>
>
- Next message: David H. Lipman: "Re: aim virus: my startup acts like its being used for the first t"
- Previous message: David H. Lipman: "Re: Trojan.PWS.Bancos.142"
- In reply to: David H. Lipman: "Re: aim virus: my startup acts like its being used for the first time"
- Next in thread: David H. Lipman: "Re: aim virus: my startup acts like its being used for the first t"
- Reply: David H. Lipman: "Re: aim virus: my startup acts like its being used for the first t"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]
Relevant Pages
|
