Win32 Ulysses2 virus warning

G

Guest

Any time I right click on a file, my CA eTrust Antivirus shows a box that
gives multiple alerts that many of my C:Windows files have a Win32 Ulysses 2
virus. However, if I scan the computer, it comes up with no viruses at all.
I have researched CA's site and they have nothing on this particular virus,
which makes no sense to me. Does anyone know what this is and if there is a
way to stop this nonsense? I have used Spybot S&D, Adaware and multiple
anti-virus software and nothing fixes this problem. I would greatly
appreciate any help anyone has on this.
Thank you so much.
 
D

David H. Lipman

1) Download the following two items...

Trend Sysclean Package
http://www.trendmicro.com/download/dcs.asp

Latest Trend signature files.
http://www.trendmicro.com/download/pattern.asp

Create a directory.
On drive "C:\"
(e.g., "c:\New Folder")
or the desktop
(e.g., "C:\Documents and Settings\lipman\Desktop\New Folder")

Download SYSCLEAN.COM and place it in that directory.
Download the Trend Pattern File by obtaining the ZIP file.
For example; lpt287.zip

Extract the contents of the ZIP file and place the contents in the same directory as
SYSCLEAN.COM .

2) Disable System Restore
http://vil.nai.com/vil/SystemHelpDocs/DisableSysRestore.htm
3) Reboot your PC into Safe Mode then shutdown as many applications as possible.
4) Using the Trend Sysclean utility, perform a Full Scan of your platform and
clean/delete any infectors found
5) Restart your PC and perform a "final" Full Scan of your platform
6) Re-enable System Restore and re-apply any System Restore preferences,
(e.g. HD space to use suggested 400 ~ 600MB),
7) Reboot your PC.
8) Create a new Restore point
9) Please report back your results

Dave





| Any time I right click on a file, my CA eTrust Antivirus shows a box that
| gives multiple alerts that many of my C:Windows files have a Win32 Ulysses 2
| virus. However, if I scan the computer, it comes up with no viruses at all.
| I have researched CA's site and they have nothing on this particular virus,
| which makes no sense to me. Does anyone know what this is and if there is a
| way to stop this nonsense? I have used Spybot S&D, Adaware and multiple
| anti-virus software and nothing fixes this problem. I would greatly
| appreciate any help anyone has on this.
| Thank you so much.
 
G

Guest

Dave,
I must have done something wrong because it did nothing. I went to the two
web sites and download both items. I made a new folder on my desktop and
placed both in there. Then I turned off System Restore, rebooted in safe
mode and did a tsc. A black screen came up and for almost two minutes, I saw
loads of scrolling virus definitions, etc. When it was done, it just took me
out of there. It didn't give me an opportunity to clean or delete anything.
So I rebooted again into regular mode and did the scan again and the same
reaction occurred. When I turned my System Restore and tried to see if the
virus warnings still came up, they did as they always have.
What did I do wrong??? I have no idea. If you think it was my error, would
you go through it step by step for me, as if you were explaining it to
someone who knows nothing about computers? That is not the case and I
usually can fix things myself, but this time it's not working.
Thank you so much for any help you can offer.
Lori
 
D

David H. Lipman

You didn't do anything wrong. There is a log file SYSCLEAN.LOG and I get the impression you
will find that TrendMicros Sysclean failed to find anything. Find that SYSCLEAN.LOG file
and look at it and see if it found anything. You can also post it if you can't understand
it, but, I get the strong feeling you will.

I have another scanner I can suggest, it knows approx. 110,000 infectors. However, due to
licensing issues, I can't post it in public.

If you email me, I can provide you with that information. Just remove ~nospam~

Dave




| Dave,
| I must have done something wrong because it did nothing. I went to the two
| web sites and download both items. I made a new folder on my desktop and
| placed both in there. Then I turned off System Restore, rebooted in safe
| mode and did a tsc. A black screen came up and for almost two minutes, I saw
| loads of scrolling virus definitions, etc. When it was done, it just took me
| out of there. It didn't give me an opportunity to clean or delete anything.
| So I rebooted again into regular mode and did the scan again and the same
| reaction occurred. When I turned my System Restore and tried to see if the
| virus warnings still came up, they did as they always have.
| What did I do wrong??? I have no idea. If you think it was my error, would
| you go through it step by step for me, as if you were explaining it to
| someone who knows nothing about computers? That is not the case and I
| usually can fix things myself, but this time it's not working.
| Thank you so much for any help you can offer.
| Lori
|
| "David H. Lipman" wrote:
|
| > 1) Download the following two items...
| >
| > Trend Sysclean Package
| > http://www.trendmicro.com/download/dcs.asp
| >
| > Latest Trend signature files.
| > http://www.trendmicro.com/download/pattern.asp
| >
| > Create a directory.
| > On drive "C:\"
| > (e.g., "c:\New Folder")
| > or the desktop
| > (e.g., "C:\Documents and Settings\lipman\Desktop\New Folder")
| >
| > Download SYSCLEAN.COM and place it in that directory.
| > Download the Trend Pattern File by obtaining the ZIP file.
| > For example; lpt287.zip
| >
| > Extract the contents of the ZIP file and place the contents in the same directory as
| > SYSCLEAN.COM .
| >
| > 2) Disable System Restore
| > http://vil.nai.com/vil/SystemHelpDocs/DisableSysRestore.htm
| > 3) Reboot your PC into Safe Mode then shutdown as many applications as possible.
| > 4) Using the Trend Sysclean utility, perform a Full Scan of your platform and
| > clean/delete any infectors found
| > 5) Restart your PC and perform a "final" Full Scan of your platform
| > 6) Re-enable System Restore and re-apply any System Restore preferences,
| > (e.g. HD space to use suggested 400 ~ 600MB),
| > 7) Reboot your PC.
| > 8) Create a new Restore point
| > 9) Please report back your results
| >
| > Dave
| >
| >
| >
| >
| >
| > | > | Any time I right click on a file, my CA eTrust Antivirus shows a box that
| > | gives multiple alerts that many of my C:Windows files have a Win32 Ulysses 2
| > | virus. However, if I scan the computer, it comes up with no viruses at all.
| > | I have researched CA's site and they have nothing on this particular virus,
| > | which makes no sense to me. Does anyone know what this is and if there is a
| > | way to stop this nonsense? I have used Spybot S&D, Adaware and multiple
| > | anti-virus software and nothing fixes this problem. I would greatly
| > | appreciate any help anyone has on this.
| > | Thank you so much.
| >
| >
| >
 
G

Guest

Dave,
Since I last wrote to you, I redownloaded everything and started from
scratch. Believe it or not, this time the system cleaner is running NOT in
DOS, as it was before, and has been running now as a program should look for
over 30 minutes. I can't believe how long this is taking.
I didn't know how to email you since I don't have your address. I will
continue on with this System Cleaner utility and see what occurs. I will
write as soon as I'm finished, or should I say as soon as it's finished.
Thank you for being such a sweetheart.
Lori
 
D

David H. Lipman

| You didn't do anything wrong. There is a log file SYSCLEAN.LOG and I get the impression
you
| will find that TrendMicros Sysclean failed to find anything. Find that SYSCLEAN.LOG file
| and look at it and see if it found anything. You can also post it if you can't understand
| it, but, I get the strong feeling you will.
|
| I have another scanner I can suggest, it knows approx. 110,000 infectors. However, due to
| licensing issues, I can't post it in public.
|
| If you email me, I can provide you with that information. Just remove ~nospam~
|
| Dave
|
|
|
|
| | | Dave,
| | I must have done something wrong because it did nothing. I went to the two
| | web sites and download both items. I made a new folder on my desktop and
| | placed both in there. Then I turned off System Restore, rebooted in safe
| | mode and did a tsc. A black screen came up and for almost two minutes, I saw
| | loads of scrolling virus definitions, etc. When it was done, it just took me
| | out of there. It didn't give me an opportunity to clean or delete anything.
| | So I rebooted again into regular mode and did the scan again and the same
| | reaction occurred. When I turned my System Restore and tried to see if the
| | virus warnings still came up, they did as they always have.
| | What did I do wrong??? I have no idea. If you think it was my error, would
| | you go through it step by step for me, as if you were explaining it to
| | someone who knows nothing about computers? That is not the case and I
| | usually can fix things myself, but this time it's not working.
| | Thank you so much for any help you can offer.
| | Lori
| |
| | "David H. Lipman" wrote:
| |
| | > 1) Download the following two items...
| | >
| | > Trend Sysclean Package
| | > http://www.trendmicro.com/download/dcs.asp
| | >
| | > Latest Trend signature files.
| | > http://www.trendmicro.com/download/pattern.asp
| | >
| | > Create a directory.
| | > On drive "C:\"
| | > (e.g., "c:\New Folder")
| | > or the desktop
| | > (e.g., "C:\Documents and Settings\lipman\Desktop\New Folder")
| | >
| | > Download SYSCLEAN.COM and place it in that directory.
| | > Download the Trend Pattern File by obtaining the ZIP file.
| | > For example; lpt287.zip
| | >
| | > Extract the contents of the ZIP file and place the contents in the same directory as
| | > SYSCLEAN.COM .
| | >
| | > 2) Disable System Restore
| | > http://vil.nai.com/vil/SystemHelpDocs/DisableSysRestore.htm
| | > 3) Reboot your PC into Safe Mode then shutdown as many applications as possible.
| | > 4) Using the Trend Sysclean utility, perform a Full Scan of your platform and
| | > clean/delete any infectors found
| | > 5) Restart your PC and perform a "final" Full Scan of your platform
| | > 6) Re-enable System Restore and re-apply any System Restore preferences,
| | > (e.g. HD space to use suggested 400 ~ 600MB),
| | > 7) Reboot your PC.
| | > 8) Create a new Restore point
| | > 9) Please report back your results
| | >
| | > Dave
| | >
| | >
| | >
| | >
| | >
| | > | | > | Any time I right click on a file, my CA eTrust Antivirus shows a box that
| | > | gives multiple alerts that many of my C:Windows files have a Win32 Ulysses 2
| | > | virus. However, if I scan the computer, it comes up with no viruses at all.
| | > | I have researched CA's site and they have nothing on this particular virus,
| | > | which makes no sense to me. Does anyone know what this is and if there is a
| | > | way to stop this nonsense? I have used Spybot S&D, Adaware and multiple
| | > | anti-virus software and nothing fixes this problem. I would greatly
| | > | appreciate any help anyone has on this.
| | > | Thank you so much.
| | >
| | >
| | >
|
|
 
D

David H. Lipman

[email protected]

Just remove ~nospam~

Dave




| Dave,
| Since I last wrote to you, I redownloaded everything and started from
| scratch. Believe it or not, this time the system cleaner is running NOT in
| DOS, as it was before, and has been running now as a program should look for
| over 30 minutes. I can't believe how long this is taking.
| I didn't know how to email you since I don't have your address. I will
| continue on with this System Cleaner utility and see what occurs. I will
| write as soon as I'm finished, or should I say as soon as it's finished.
| Thank you for being such a sweetheart.
| Lori
 
G

Guest

Dave,
I did email you, but I never heard back from you. Here is the update.
After the program ran, it ran through a DOS version again, without prompting,
and after certain lines, it would give an error message, something like
(Error( -94>>>. Then when I checked the log, it showed it couldn't access
files and no infections were found.
However, when it was done, I tried right clicking the files that always gave
the warning, I was able to go right into them. So obviously something
worked. Thank you so much for your help. I am posting a new issue. Perhaps
you can look at it regarding a TBPS.exe problem I'm also having. Thanks
again for your help. I really appreciate it.
Lori
 
D

David H. Lipman

Lori:

I never received any email.

Dave



| Dave,
| I did email you, but I never heard back from you. Here is the update.
| After the program ran, it ran through a DOS version again, without prompting,
| and after certain lines, it would give an error message, something like
| (Error( -94>>>. Then when I checked the log, it showed it couldn't access
| files and no infections were found.
| However, when it was done, I tried right clicking the files that always gave
| the warning, I was able to go right into them. So obviously something
| worked. Thank you so much for your help. I am posting a new issue. Perhaps
| you can look at it regarding a TBPS.exe problem I'm also having. Thanks
| again for your help. I really appreciate it.
| Lori
 

Ask a Question

Want to reply to this thread or ask your own question?

You'll need to choose a username for the site, which only take a couple of moments. After that, you can post your question and our members will help you out.

Ask a Question

Top