Re: A trojan or something , whse

From: David H. Lipman (DLipman~nospam~_at_Verizon.Net)
Date: 05/19/05


Date: Thu, 19 May 2005 09:57:39 -0400

From: "Umwhat" <me.somewhere@somewhere else.com>

| it's there in msconfig if I RUN msconfig and I'm pretty sure it's a tro...
| a vi... I mean I don't know what it is but can someone tell me how to
| get rid of it please . I'm sure it's nowhere else and it may have come with
| an older download archived search I had done for an older Motherboard which
| had a Adobe type program to view it by .
| but and but and um , ,,,,
| the computer has crashed a few times and the latest Error message was :
| BCCode: 19 BCP1: 00000020 BCP2: E2B00490 BCP3: E2B00590 BCP4: 0C200201
| OS Ver: 5_1_2600 SP:2_0 Product:768_1
| I saw a similar error number on the Microsoft website and that number
| referred to a Trojan , I think .
| I had downloaded 2 diagnostic programs too , one of which included
| giveio.sys , which I have promptly removed because I didn't really need
| them anyway , three , anyone at home tonight ?
| it's getting coooooolder in Auckland NZ !
|
| --
| signature

Dump the contents of the IE Temporary Internet Folder cache (TIF)
Start --> Settings --> Control Panel --> Internet Options --> Delete Files

Dump the contents of the Mozilla FireFox Cache { if you use FireFox }
Tools --> Options --> Privacy --> Cache --> Clear

Download CLEAN.EXE from the URL --
http://www.ik-cs.com/programs/virtools/clean.exe

It is a self-extracting ZIP file that contains the Kixtart Script Interpreter
{ http://kixtart.org Kixtart is CareWare } three batch files, two Kixtart scripts, two Link
(.lnk) files and a PDF instruction file.

GETFILES.BAT -- For downloading (FTP) the files needed to run the McAfee Command Line
Scanner. If you are using Windows XP, you may have to disable the Windows XP FireWall to
allow the FTP utility to download the needed files

CLEAN.BAT -- For running within Windows after running c:\mcafee\GetFiles.BAT. If you choose
to scan again at a future date, run this batch file. It will automatically check the date
of the McAfee DAT files and if it is a couple of days old, it will download (FTP) the latest
signature files and install them before performing the scan.

DOSCLEAN.BAT -- For use on a Win9x/ME PC or on a Win2K/WinXP PC that is using FAT32 after
you have booted from an Emergency Boot Disk or DOS disk and have already executed;
c:\mcafee\GetFiles.BAT from within Windows. DOS disk boot images can be obtained from;
http://www.bootdisk.com/bootdisk.htm

I need you to perform the following...

Execute; CLEAN.EXE
Choose; Unzip
Choose; Close

Execute; c:\mcafee\GetFiles.BAT
{ or Double-click on 'GetFiles Link' in c:\mcafee }

Reboot the PC into Safe Mode [F8 key during boot]

Shutdown as many applications as possible !
It would also help for you to read - "How to perform a clean boot in Windows XP"
http://support.microsoft.com/kb/310353

Execute; c:\mcafee\CLEAN.BAT
{ or Double-click on 'Clean Link' in c:\mcafee }

A final report in HTML format called C:\mcafee\ScanReport.HTML will be generated. At the
end of the scan, it will be displayed in your browser (Opera, FireFox or Internet Explorer).
It is suggested that you move the report out of c:\mcafee before performing another scan.
It would be a good idea to scan in Safe Mode and in Normal Mode and save a copy of the HTML
report for each session.

* * * Please report back your results * * *

-- 
Dave
http://www.claymania.com/removal-trojan-adware.html
http://www.ik-cs.com/got-a-virus.htm


Relevant Pages

  • Re: Potential unwanted program
    ... Download CLEAN.EXE from the URL -- ... If you are using Windows XP, you may have to disable the Windows XP FireWall to ... DOS disk boot images can be obtained from; ... Execute; CLEAN.EXE ...
    (microsoft.public.windowsxp.general)
  • Re: 100% CPU Usage problem
    ... Download CLEAN.EXE from the URL -- ... If you are using Windows XP, you may have to disable the Windows XP FireWall to ... DOS disk boot images can be obtained from; ... Execute; CLEAN.EXE ...
    (microsoft.public.win2000.general)
  • Re: RDRIV Virus
    ... Download CLEAN.EXE from the URL -- ... If you are using Windows XP, you may have to disable the Windows XP FireWall to ... DOS disk boot images can be obtained from; ... Execute; CLEAN.EXE ...
    (microsoft.public.security.virus)
  • Re: Windows XP wont start upon boot
    ... Enquire, plan and execute ... Once the computer does boot you can then look to add back ... If you can't reach a Windows ... Stop trying to defend your suggestion of disabling AR, ...
    (microsoft.public.windowsxp.general)
  • Re: Backdoor.Lateda.C
    ... | from connecting to the internet. ... Download CLEAN.EXE from the URL -- ... DOS disk boot images can be obtained from; ... Execute; CLEAN.EXE ...
    (microsoft.public.security.virus)