Re: gaelicum.a

From: Carey Frisch [MVP] (cnfrisch_at_nospamgmail.com)
Date: 11/28/05 

Date: Sun, 27 Nov 2005 22:26:29 -0600

Many viruses are designed to fatally corrupt and destroy the
operating system. You can always remove the virus file,
but the damage caused by the execution of the malicious
virus code has already been done. Try the following:

How to Perform a Windows XP Repair Install
http://www.michaelstevenstech.com/XPrepairinstall.htm

If the "Repair Install" is unsuccessful, then you need to
start from scratch and perform a "Clean Install".

Clean Install Windows XP
http://www.michaelstevenstech.com/cleanxpinstall.html

Here's what you can do to enhance the security on your PC
http://www.microsoft.com/athome/security/protect/windowsxpsp2/Default.mspx

Antivirus software: Frequently asked questions
http://www.microsoft.com/athome/security/protect/antivirus.mspx 

-- 
Carey Frisch
Microsoft MVP
Windows - Shell/User
Microsoft Community Newsgroups
news://msnews.microsoft.com/
-------------------------------------------------------------------------------------------
"erichard777" wrote:
| I have a virus that keeps coming back.   (I am running windows xp with SP2. I 
| have windows update in auto-mode and have a broadband connection.)
| 
| This has been going on for several months.  Whenever I get it again, I 
| download AVG's vcleaner.exe (I have to redownload it because this virus will 
| always immediately infect vcleaner.exe.) then I immediately go into safe mode 
| and run vcleaner. (after I check it with AVG)  And I also run AVG again.  
| This will heal all the infected files, and get rid of it for a week or so.  
| 
| But then it will show up again.
| 
| Btw, I have turned off system restore and then turned it back on again 
| several times after the scan, but that has never helped.  I have also been 
| disconnecting the internet connection at night, but that has not made any 
| difference either.
| 
| I have off and on also researched the Internet, including newsgroups and 
| blogs, about this virus and have found no way to stop getting it.  I have, 
| however, found a lot of horror stories about this virus-- it continues to 
| mess up a lot of computers.
| 
| AVG says this about this virus:
| .....................................
| 
| Win32/Gaelicum.A
| alias: Win32.Tenga, W32.Licum, W32/Gael
| 
| It`s parasitic infector and internet worm.
| 
| Virus spreads itself exploiting Buffer Overrun In RPC Interface 
| vulnerability described in Microsoft Security Bulletin MS03-026.
| 
| When the worm is launched, it infects .EXE files on all accessible drives.
| 
| Virus also tries to download trojan horse from the internet.
| 
| Healing:
| Please download Vcleaner utility.
| ................................................
| 
| So this is my question for this forum:
| 
| When I read Microsoft Security Bulletin MS03-026 it offers me no help, 
| because I already have SP2.    This virus, in my opinion, is a SECURITY 
| problem.  Is there nothing Microsoft can offer as a continual defense against 
| this virus?
| 
| Richard

Relevant Pages

  • Re: computer virus usegroups
    ... New Virus Stealing Information from Computer Users ... You can infect ... attempt to download from a Russian website. ... Internet Explorer to protect users of its Internet Explorer browsers ...
    (sci.med.diseases.lyme)
  • Re: Cost of viruses etc., on PCs
    ... When they put a virus out, 90%+ of the time it will be a Windows ... Not when the chances of finding one to infect is so low. ... I wasn't running any anti-virus software on that machine. ...
    (comp.sys.mac.advocacy)
  • Re: shutting down
    ... please contact Microsoft at 1-866-PCSafety. ... Windows XP Professional ... participating in the Microsoft Virus Information Alliance, ... sluggish or your Internet connection is slow ...
    (microsoft.public.scripting.virus.discussion)
  • Bobax.C
    ... Other files containing the virus have been ... W32.Bobax.C is a worm that exploits both the LSASS ... While this threat may execute on Windows 95/98/Me/Server ... Virus Definitions * ...
    (microsoft.public.windowsxp.security_admin)
  • hlp plz
    ... >i run windows xp home. ... What is notable about this virus is ... Shared drives: Runs as an NT service and can spread on ... virus can infect Explorer.exe on a Windows NT system. ...
    (microsoft.public.windowsxp.accessibility)