Virus issue

Do you have a question? Post it now! No Registration Necessary.  Now with pictures!

Threaded View
I have a problem with what seems to be multiple viruses on my machine. I am
hoping to identify them so that I can remove them. These viruses are not
detected at all ny Spybot 1.6, Adaware 2009 or the latest Trend Officescan.

My symtoms are:
1.    I have an autorun.inf that keeps appearing on my memory sticks. The
content of the file is something like shellexecute=e:\m.exe
2.    The m.exe file keeps appearing on the route of all memory sticks.
3.    I cannot search for virus related content in Internet Explorer 7. The
browser just closes.
4.    I cannot run manual scan (even in safe mode) with some of the virus
packages.
5.    I cannot access some of the menus in the virus applications. The virus
application just closes.

I have installed Symantec Endpoint Protect 11 on the PC. It deletes the
m.exe continuously as it appears. Bitdefender and Avast do the same. Trend
does nothing.

Whatever is causing the problem is still on the PC. Please help me identify
the issue.



Re: Virus issue


| I have a problem with what seems to be multiple viruses on my machine. I am
| hoping to identify them so that I can remove them. These viruses are not
| detected at all ny Spybot 1.6, Adaware 2009 or the latest Trend Officescan.

| My symtoms are:
| 1.    I have an autorun.inf that keeps appearing on my memory sticks. The
| content of the file is something like shellexecute=e:\m.exe
| 2.    The m.exe file keeps appearing on the route of all memory sticks.
| 3.    I cannot search for virus related content in Internet Explorer 7. The
| browser just closes.
| 4.    I cannot run manual scan (even in safe mode) with some of the virus
| packages.
| 5.    I cannot access some of the menus in the virus applications. The virus
| application just closes.

| I have installed Symantec Endpoint Protect 11 on the PC. It deletes the
| m.exe continuously as it appears. Bitdefender and Avast do the same. Trend
| does nothing.

| Whatever is causing the problem is still on the PC. Please help me identify
| the issue.



You have an AutoRun worm.


First disable AutoPlay/AutoRun on your computer.

Then use the following Multi AV scanning tool to clean your PC and ALL removable
read/write media.

Download MULTI_AV.EXE from the URL --
http://www.pctip.ch/ds/28400/28470/Multi_AV.exe
or
http://212.98.39.7/ds/28400/28470/Multi_AV.exe

http://www.pctip.ch/downloads/dl/35905.asp
or
http://212.98.39.7/downloads/dl/35905.asp

English:
http://www.raymond.cc/blog/archives/2008/01/09/scan-your-computer-with-multiple-anti-virus-for-free /

To use this utility, perform the following...
Execute; Multi_AV.exe { Note: You must use the default folder C:\AV-CLS }
Choose; Unzip
Choose; Close

Execute; C:\AV-CLS\StartMenu.BAT
{ or Double-click on 'Start Menu' in C:\AV-CLS }

NOTE: You may have to disable your software FireWall or allow WGET.EXE to go
through your
FireWall to allow it to download the needed AV vendor related files.

C:\AV-CLS\StartMenu.BAT -- { or Double-click on 'Start Menu' in C:\AV-CLS}
This will bring up the initial menu of choices and should be executed in Normal
Mode.
This way all the components can be downloaded from each AV vendor's web site.
The choices are; Sophos, Trend, McAfee, Kaspersky, Exit this menu and Reboot the
PC.

You can choose to go to each menu item and just download the needed files or you
can
download the files and perform a scan in Normal Mode. Once you have downloaded
the files
needed for each scanner you want to use, you should reboot the PC into Safe Mode
[F8 key
during boot] and re-run the menu again and choose which scanner you want to run
in Safe
Mode.  It is suggested to run the scanners in both Safe Mode and Normal Mode.

When the menu is displayed hitting 'H' or 'h' will bring up a more comprehensive
PDF help
file.

* * *    Please report back your results  * * *

--
Dave
http://www.claymania.com/removal-trojan-adware.html
Multi-AV - http://www.pctipp.ch/downloads/dl/35905.asp



Re: Virus issue

IS wrote:

Quoted text here. Click to load it


You better just format the drive and re-install, that thing is toast.



--

"Newspaper claims car thief transformed into a goat"
http://news.yahoo.com/s/ap/20090124/ap_on_fe_st/odd_goat_thief_5

Re: Virus issue

Quoted text here. Click to load it



My guess would be Conficker/Downadup.
There are removal tools available.
Google for it.



--
Posted via NewsDemon.com - Premium Uncensored Newsgroup Service
         ------->>>>>>http://www.NewsDemon.com <<<<<<------
Unlimited Access, Anonymous Accounts, Uncensored Broadband Access

Site Timeline