I was also wondering how i got a trojan and a bunch of worms. They were all in the outlook express folder but i don't know their names right now because Avast virus chest is not opening up right now.
A couple questions about anti-virus software and a recent infection
Started by
cews
, Jan 02 2007 10:53 AM
#1
Posted 02 January 2007 - 10:53 AM
I was also wondering how i got a trojan and a bunch of worms. They were all in the outlook express folder but i don't know their names right now because Avast virus chest is not opening up right now.
#2
Posted 02 January 2007 - 11:09 AM
The Trojan is described as Win32:Small-S
The 19 worms are all described as beagle or sober.
The original files were all .zip and were not opened to my knowledge.
The 19 worms are all described as beagle or sober.
The original files were all .zip and were not opened to my knowledge.
#3
Posted 02 January 2007 - 11:41 AM
One method: Uninstall it, then if you want it installed again, re-install it. Be sure all of your purchase receipts are saved safely and the install files are safe as well.
If and when you want to remove Norton from your system...download...
Norton Removal Tool - "SymNRT" - 2006.2.1.18 from ... http://service1.syma...005033108162039
Anything to do with malware, should be directed to the Malware Forum...
In the meantime, a short term solution to consider... visit, TREND MICROSYSTEMS [http://uk.trendmicro-europe.com/] and run House Call... "Free Online Scan" [http://uk.trendmicro...all_launch.php]
OR...
Visit TREND and download "SysClean Package"... [Sysclean_FE.exe] once downloaded insert it in its own folder c:\SysClean...then download the latest virus pattern file "Virus Pattern File 4.155.00 Jan 01/07" and be sure to include it in the same folder. Tap on the Installer. You an run it in Windows, but it is more "cleansing" in DOS...
NOTE: For instructions on how to use this package, consult the "How to Use" section of the readme file, readme_sysclean.txt. This file also contains the description and the different features of this package.
Go to: [http://www.trendmicr...wnload/dcs.asp]
Go to: [http://www.trendmicr...ad/pattern.asp] and download
Virus Pattern File (Official Pattern Release) - 4.155.00
If you continue to use SysClean, be sure to visit the pattern file download page frequently to access new pattern files.
Shut down your system, reboot in Safe mode with Admin Privileges. In DOS, ...proceed to that same folder and activate "SysClean.com"...this will take a wee bit of time, as the patterns are opened and then it goes searching in deleting what may be your problem..
Also
SysClean can more easily be had here: http://www.trendmicr...ad/sysclean.asp
NB...read the readme file before doing anything...
If and when you want to remove Norton from your system...download...
Norton Removal Tool - "SymNRT" - 2006.2.1.18 from ... http://service1.syma...005033108162039
Anything to do with malware, should be directed to the Malware Forum...
In the meantime, a short term solution to consider... visit, TREND MICROSYSTEMS [http://uk.trendmicro-europe.com/] and run House Call... "Free Online Scan" [http://uk.trendmicro...all_launch.php]
OR...
Visit TREND and download "SysClean Package"... [Sysclean_FE.exe] once downloaded insert it in its own folder c:\SysClean...then download the latest virus pattern file "Virus Pattern File 4.155.00 Jan 01/07" and be sure to include it in the same folder. Tap on the Installer. You an run it in Windows, but it is more "cleansing" in DOS...
NOTE: For instructions on how to use this package, consult the "How to Use" section of the readme file, readme_sysclean.txt. This file also contains the description and the different features of this package.
Go to: [http://www.trendmicr...wnload/dcs.asp]
Go to: [http://www.trendmicr...ad/pattern.asp] and download
Virus Pattern File (Official Pattern Release) - 4.155.00
If you continue to use SysClean, be sure to visit the pattern file download page frequently to access new pattern files.
Shut down your system, reboot in Safe mode with Admin Privileges. In DOS, ...proceed to that same folder and activate "SysClean.com"...this will take a wee bit of time, as the patterns are opened and then it goes searching in deleting what may be your problem..
Also
SysClean can more easily be had here: http://www.trendmicr...ad/sysclean.asp
NB...read the readme file before doing anything...
#4
Posted 03 January 2007 - 08:18 AM
the "live agent" of norton (can't remember what they call it right now) can usually be closed by right clicking on the icon for it in the task bar and choosing "exit" or something to that effect...that should turn off the live portion of the software. alternately you could try starting in safe mode as i don't THINK that norton will startup in safe mode...
you should also probably have a go through the malware forum as they will probably be able to help y ou clean up anything that avast/norton miss
Please go to the malware forum and follow the instructions at the top....Especially the CLICK HERE.
That will give you several steps that will help you clean up 70 percent of all problems by yourself. If at the end of the process you are still having difficulty (and you may not be) then post a hijackthis log in THE MALWARE FORUM forum.
(Posting HiJack This logs in any other forum other than the malware forum is forbidden. If you post an HJT log in any other forum, it will be removed and it will take you longer to get help, so please make sure you only post HJT logs in the malware forum)
If you are still having problems after getting a clean bill of health from the malware expert, please return to this thread.
you should also probably have a go through the malware forum as they will probably be able to help y ou clean up anything that avast/norton miss
Please go to the malware forum and follow the instructions at the top....Especially the CLICK HERE.
That will give you several steps that will help you clean up 70 percent of all problems by yourself. If at the end of the process you are still having difficulty (and you may not be) then post a hijackthis log in THE MALWARE FORUM forum.
(Posting HiJack This logs in any other forum other than the malware forum is forbidden. If you post an HJT log in any other forum, it will be removed and it will take you longer to get help, so please make sure you only post HJT logs in the malware forum)
If you are still having problems after getting a clean bill of health from the malware expert, please return to this thread.
#5
Posted 03 January 2007 - 06:20 PM
Norton does work in safe mode.
It's not a great idea to run two AV programs at the same time, either.
Johanna
It's not a great idea to run two AV programs at the same time, either.
Johanna
Similar Topics
0 user(s) are reading this topic
0 members, 0 guests, 0 anonymous users