Re: registry virus

From: David H. Lipman (DLipman~nospam~_at_Verizon.Net)
Date: 09/17/05 

Date: Fri, 16 Sep 2005 19:50:33 -0400

From: "GL" <GL@discussions.microsoft.com>

| Hi David
| Thank you for responding to my posting. I am sorry I did not have the
| correct information. I tried again to copy info correctly. Zone Alarm (when
| it was installed) was just saying a virus find, and now in Panda virus
| software it keeps popping up hackertool C:/ Windowssystem32 R drive.sys. Each
| time I click to close it- it reappears. Then when spybot is ran it says that
| this same file has stopped Windows updates and turned off Firewall. I did
| remove etrust before installing Panda. I hope this is better information for
| you to take a shot at for me. I appreicate it. I also have printed out the
| following links you posted prior do you think these are still helpful?
| Thank you again
| GL

Again, you post has incomplete/malformed information. It does need to be EXACT to get the
*best* help...

The term "hackertool" does not show in the Panda AV library.

C:/ Windowssystem32 R drive.sys
looks like a folder and it should be something like...

C:\Windows\system32\

But can't be sure of the rest nor assume what it really is...
C:\Windows\system32\ R drive.sys
or
C:\Windows\system32\Rdrive.sys

I do want to to download the Multi AV and run it as a prescribed..

Download MULTI_AV.EXE from the URL --
http://www.ik-cs.com/programs/virtools/Multi_AV.exe

To use this utility, perform the following...
Execute; Multi_AV.exe { Note: You must use the default folder C:\AV-CLS }
Choose; Unzip
Choose; Close

Execute; C:\AV-CLS\StartMenu.BAT
{ or Double-click on 'Start Menu' in C:\AV-CLS }

Start with "1. Sophos" on the menu. 

-- 
Dave
http://www.claymania.com/removal-trojan-adware.html
http://www.ik-cs.com/got-a-virus.htm