Jump to content

Welcome to Geeks to Go - Register now for FREE

Need help with your computer or device? Want to learn new tech skills? You're in the right place!
Geeks to Go is a friendly community of tech experts who can solve any problem you have. Just create a free account and post your question. Our volunteers will reply quickly and guide you through the steps. Don't let tech troubles stop you. Join Geeks to Go now and get the support you need!

How it Works Create Account
Photo

Problems with win32.p2p-worm.alcan.a


  • Please log in to reply

#1
stormboy

stormboy

    New Member

  • Member
  • Pip
  • 1 posts
Someone has asked me to help them rid their computer of a problem with win32.p2p-worm.alcan.a. They are running Windows ME and use Earthlink as their ISP. Earthlink has virus, spam, and spyware blockers. The spyware is a Webroot program. They have a virus cleaner from Avast and additionally they have Zone Labs Zone Alarm.

The way in which they are observing the problem is that they run an Ad Aware program which catches the worm (Win32.p2p-worm.Alcan.a). For example, 3 days ago, they ran it 3 times to get rid of all of the files that it warns them about since they have to restart Ad Aware after each time running it. The first time it left c:\_restore\archive\fs1422.cab, the second time it was c:\restore\temp\A0059497.cpy, and the third time it was 5 files (these were .com files, something like but not necessarily exactly the following files: c:windows/system/cmd.com, c:windows/netstat.com, and c:windows/system/ping.com). They checked the threat assessment chart for this worm, but there was no match for it. The details page said these are of low risk.

The real problem is that after the events of the above paragraph, the win32.p2p-worm.alcan.a problem will return. If what they did above permanently took care of the problem instead of just temporarily, they would now be OK but what will happen is that if they run the Ad Aware program again in a day or two, the win32.p2p-worm.alcan.a problem will show up again and the removal steps will have to be done all over again. Thus it seems that something is on their machine re-creating these problems over and over again every time after they get it cleaned up.

Any assistance would be appreciated.
  • 0

Advertisements


#2
didom

didom

    Member 1K

  • Member
  • PipPipPipPip
  • 1,919 posts
Please download and unzip BFUzip from http://computercops..../Merijn/bfu.zip
Run the program and click the Web button as shown here:
Posted Image

Use this URL to copy into the address bar of the Download script window:
http://metallica.geekstogo.com/p2pnetwork.bfu

Execute the script by clicking the Execute button.
Note that you should see a progress bar while the script is being executed.

If you have any questions about the use of BFU please read here:
http://metallica.gee...structions.html


Reboot and post a new HijackThis log.
Also let me know if Taskmanager works now.
  • 0






Similar Topics

0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users

As Featured On:

Microsoft Yahoo BBC MSN PC Magazine Washington Post HP