Virus in system 32

[Guest]

My 2004 Norton Antivirus is telling me there is a virus ( a downloader)
located at C:\WINNT\System32\IPX775.dll

Problem is, Norton is unable to repair the problem, as it is denied access,
and I cannot delete or alter the file manually (same reason). How do I repair
this problem (without buying anything new if at all possible).

Thanks for any help. I can be reached at chrisch*[email protected] (remove the
*).

 

[David H. Lipman]

From: "chris c" <[email protected]>

| My 2004 Norton Antivirus is telling me there is a virus ( a downloader)
| located at C:\WINNT\System32\IPX775.dll
|
| Problem is, Norton is unable to repair the problem, as it is denied access,
| and I cannot delete or alter the file manually (same reason). How do I repair
| this problem (without buying anything new if at all possible).
|
| Thanks for any help. I can be reached at chrisch*[email protected] (remove the
| *).
|

There are anti virus News Groups specifically for this type of discussion.

microsoft.public.security.virus
alt.comp.virus
alt.comp.anti-virus


Sounds like a Downloader Trojan, not a virus.

Download MULTI_AV.EXE from the URL --
http://www.ik-cs.com/programs/virtools/Multi_AV.exe

To use this utility, perform the following...
Execute; Multi_AV.exe { Note: You must use the default folder C:\AV-CLS }
Choose; Unzip
Choose; Close

Execute; C:\AV-CLS\StartMenu.BAT
{ or Double-click on 'Start Menu' in C:\AV-CLS }

NOTE: You may have to disable your software FireWall or allow WGET.EXE to go through your
FireWall to allow it to download the needed AV vendor related files.

C:\AV-CLS\StartMenu.BAT -- { or Double-click on 'Start Menu' in C:\AV-CLS}
This will bring up the initial menu of choices and should be executed in Normal Mode.
This way all the components can be downloaded from each AV vendor's web site.
The choices are; Sophos, Trend, McAfee, Kaspersky, Exit this menu and Reboot the PC.

You can choose to go to each menu item and just download the needed files or you can
download the files and perform a scan in Normal Mode. Once you have downloaded the files
needed for each scanner you want to use, you should reboot the PC into Safe Mode [F8 key
during boot] and re-run the menu again and choose which scanner you want to run in Safe
Mode. It is suggested to run the scanners in both Safe Mode and Normal Mode.

When the menu is displayed hitting 'H' or 'h' will bring up a more comprehensive PDF help
file. http://www.ik-cs.com/multi-av.htm

Additional Instructions:
http://pcdid.com/Multi_AV.htm


* * * Please report back your results * * *

 

[Guest]

My reply is at the bottom of your message :

My 2004 Norton Antivirus is telling me there is a virus ( a downloader)
located at C:\WINNT\System32\IPX775.dll

Problem is, Norton is unable to repair the problem, as it is denied access,
and I cannot delete or alter the file manually (same reason). How do I repair
this problem (without buying anything new if at all possible).

Thanks for any help. I can be reached at chrisch*[email protected] (remove the
*).

Hello . In order to remove that locked file , you can use this tool :

Undll - the DLL removal utility (author Paolo Monti)
http://www.nod32.it/tools/UNDLL.ZIP

Extract it , run it , point it to the infected dll file and that's it .


Second , check your computer for any other malware using the instructions
here:
http://pandaman.my.contact.bg


And may be the most important , get rid of this very old Norton 2004 .
Since it is the second half of 2006 year , you need to use only current and
updated version .
If you like Symantec and do insist on using their product , use version 2006
.. As a much better solution , I advise you to have a look at NOD32
(www.eset.com)

How to remove previous AV?
http://pandaman.my.contact.bg/remAV.txt


Regards!