G
george crockett
I have Norton 2002, but the message I am getting states:
Access to the file was denied
Unable to repair file
Tracy
Access to the file was denied
Unable to repair file
Tracy
You are using an out of date browser. It may not display this or other websites correctly.
You should upgrade or use an alternative browser.
You should upgrade or use an alternative browser.
J
John Barnett - MVP
Go to www,symantec.com and search for the virus you have. Symantec usually
give full instruction on their site on how to get rid of specific virus
infections.
I assume that you have the latest updated virus definitions installed on
your pc from symantec?
Hope this helps
John Barnett - MVP
Associate Expert
give full instruction on their site on how to get rid of specific virus
infections.
I assume that you have the latest updated virus definitions installed on
your pc from symantec?
Hope this helps
John Barnett - MVP
Associate Expert
R
Rick \Nutcase\ Rogers
Hi George,
What folder does Norton indicate the infected file is in?
--
Best of Luck,
Rick Rogers aka "Nutcase" MS-MVP - Win9x
Windows isn't rocket science! That's my other hobby!
Associate Expert - WinXP - Expert Zone
What folder does Norton indicate the infected file is in?
--
Best of Luck,
Rick Rogers aka "Nutcase" MS-MVP - Win9x
Windows isn't rocket science! That's my other hobby!
Associate Expert - WinXP - Expert Zone
G
george crockett
yes I do. My I have done that as well but there removal instructions did
not work What next????
not work What next????
G
george crockett
C:\program Files\STC\slmss.exe
C:\Documents and Settings\Tracy\Local Setting...\slmss[1].exe
HELP....
C:\Documents and Settings\Tracy\Local Setting...\slmss[1].exe
HELP....
C
cimex
Did you do all the steps on this page? Did you end the trojan process and
delete the value that was added to the registry?
http://www.symantec.com/avcenter/venc/data/downloader.dluca.b.html
delete the value that was added to the registry?
http://www.symantec.com/avcenter/venc/data/downloader.dluca.b.html
R
Rick \Nutcase\ Rogers
Hi,
Sounds like you don't have permissions to those folders. Before you attempt
to delete, take ownership:
HOW TO: Take Ownership of a File or Folder in Windows XP [Q308421]
http://support.microsoft.com/?kbid=308421
--
Best of Luck,
Rick Rogers aka "Nutcase" MS-MVP - Win9x
Windows isn't rocket science! That's my other hobby!
Associate Expert - WinXP - Expert Zone
Sounds like you don't have permissions to those folders. Before you attempt
to delete, take ownership:
HOW TO: Take Ownership of a File or Folder in Windows XP [Q308421]
http://support.microsoft.com/?kbid=308421
--
Best of Luck,
Rick Rogers aka "Nutcase" MS-MVP - Win9x
Windows isn't rocket science! That's my other hobby!
Associate Expert - WinXP - Expert Zone
george crockett said:C:\program Files\STC\slmss.exe
C:\Documents and Settings\Tracy\Local Setting...\slmss[1].exe
HELP....
Rick "Nutcase" Rogers said:Hi George,
What folder does Norton indicate the infected file is in?
--
Best of Luck,
Rick Rogers aka "Nutcase" MS-MVP - Win9x
Windows isn't rocket science! That's my other hobby!
Associate Expert - WinXP - Expert Zone
G
george crockett
I followed the steps but it did not work. How do I delete the value that
was added to my registry????? I still keep getting the virus alert
message..... Help
was added to my registry????? I still keep getting the virus alert
message..... Help
G
george crockett
Rick thanks but I don't know were to go to take ownership of the file.
the virus alert states: the object name is
C:\Documents and settings\Tracy\Local Setting...\slmss[1].exe
Object name; C:\Program files\STC\slmss.exe
the virus alert states: the object name is
C:\Documents and settings\Tracy\Local Setting...\slmss[1].exe
Object name; C:\Program files\STC\slmss.exe
Rick "Nutcase" Rogers said:Hi,
Sounds like you don't have permissions to those folders. Before you attempt
to delete, take ownership:
HOW TO: Take Ownership of a File or Folder in Windows XP [Q308421]
http://support.microsoft.com/?kbid=308421
--
Best of Luck,
Rick Rogers aka "Nutcase" MS-MVP - Win9x
Windows isn't rocket science! That's my other hobby!
Associate Expert - WinXP - Expert Zone
george crockett said:C:\program Files\STC\slmss.exe
C:\Documents and Settings\Tracy\Local Setting...\slmss[1].exe
HELP....
Rick "Nutcase" Rogers said:Hi George,
What folder does Norton indicate the infected file is in?
--
Best of Luck,
Rick Rogers aka "Nutcase" MS-MVP - Win9x
Windows isn't rocket science! That's my other hobby!
Associate Expert - WinXP - Expert Zone
I have Norton 2002, but the message I am getting states:
Access to the file was denied
Unable to repair file
Tracy
C
cimex
If you cannot do the full removal, your alternative may be to reformat and
reinstall. It is your choice. To back up the Registry, create a System
Restore point (see Help and Support).
Deleting the value from the registry
----------------------------------------------------------------------------
----
WARNING: Symantec strongly recommends that you back up the registry before
making any changes to it. Incorrect changes to the registry can result in
permanent data loss or corrupted files. Modify the specified keys only. Read
the document, "How to make a backup of the Windows registry," for
instructions.
----------------------------------------------------------------------------
----
1.. Click Start, and then click Run. (The Run dialog box appears.)
2.. Type regedit
Then click OK. (The Registry Editor opens.)
3.. Navigate to the key:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run
4.. In the right pane, delete the value:
"%System%\<filename>.exe /noconnect"
5.. Navigate to the key:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\uninstall\<file
name>
6.. In the right pane, delete the values:
a.. "UninstallString"="%Sytem%\<filename>-uninstall.exe /uninstall"
b.. "DisplayName"="<filename>"
7.. Look for the key:
HKEY_CURRENT_USER\Software\<the filename used by the trojan>
8.. If this key exists, delete the value:
"MIMETYPE_DESCRIPTION"=".wxx"
9.. Exit the Registry Editor.
reinstall. It is your choice. To back up the Registry, create a System
Restore point (see Help and Support).
Deleting the value from the registry
----------------------------------------------------------------------------
----
WARNING: Symantec strongly recommends that you back up the registry before
making any changes to it. Incorrect changes to the registry can result in
permanent data loss or corrupted files. Modify the specified keys only. Read
the document, "How to make a backup of the Windows registry," for
instructions.
----------------------------------------------------------------------------
----
1.. Click Start, and then click Run. (The Run dialog box appears.)
2.. Type regedit
Then click OK. (The Registry Editor opens.)
3.. Navigate to the key:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run
4.. In the right pane, delete the value:
"%System%\<filename>.exe /noconnect"
5.. Navigate to the key:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\uninstall\<file
name>
6.. In the right pane, delete the values:
a.. "UninstallString"="%Sytem%\<filename>-uninstall.exe /uninstall"
b.. "DisplayName"="<filename>"
7.. Look for the key:
HKEY_CURRENT_USER\Software\<the filename used by the trojan>
8.. If this key exists, delete the value:
"MIMETYPE_DESCRIPTION"=".wxx"
9.. Exit the Registry Editor.
G
george crockett
Does the Downloader.Dluca steps apply to my virus???
C
cimex
Good question. There are a number of Downloader trojans. See this page to
determine which one you have. The generic Downloader is not listed as
affecting XP machines.
determine which one you have. The generic Downloader is not listed as
affecting XP machines.
G
george crockett
Cimex, thanks but I am lost here nothing is working.
J
Joe
Recently a friend of mine had the same problem as you. I advised him to try
Swat IT from http://swatit.org/download.html
Take the option on the right hand side and don't sign up for anything.
It fixed his problem.
Swat IT from http://swatit.org/download.html
Take the option on the right hand side and don't sign up for anything.
It fixed his problem.
R
Rick \Nutcase\ Rogers
Hi George,
Hit the Winkey+E to open Windows Explorer, expand the folders on the left to
match the paths you are listing. Then follow the instrcutions in the article
(it's really not that difficult, it just looks complicated).
--
Best of Luck,
Rick Rogers aka "Nutcase" MS-MVP - Win9x
Windows isn't rocket science! That's my other hobby!
Associate Expert - WinXP - Expert Zone
Hit the Winkey+E to open Windows Explorer, expand the folders on the left to
match the paths you are listing. Then follow the instrcutions in the article
(it's really not that difficult, it just looks complicated).
--
Best of Luck,
Rick Rogers aka "Nutcase" MS-MVP - Win9x
Windows isn't rocket science! That's my other hobby!
Associate Expert - WinXP - Expert Zone
george crockett said:Rick thanks but I don't know were to go to take ownership of the file.
the virus alert states: the object name is
C:\Documents and settings\Tracy\Local Setting...\slmss[1].exe
Object name; C:\Program files\STC\slmss.exe
Rick "Nutcase" Rogers said:Hi,
Sounds like you don't have permissions to those folders. Before you attempt
to delete, take ownership:
HOW TO: Take Ownership of a File or Folder in Windows XP [Q308421]
http://support.microsoft.com/?kbid=308421
--
Best of Luck,
Rick Rogers aka "Nutcase" MS-MVP - Win9x
Windows isn't rocket science! That's my other hobby!
Associate Expert - WinXP - Expert Zone
george crockett said:C:\program Files\STC\slmss.exe
C:\Documents and Settings\Tracy\Local Setting...\slmss[1].exe
HELP....
Hi George,
What folder does Norton indicate the infected file is in?
--
Best of Luck,
Rick Rogers aka "Nutcase" MS-MVP - Win9x
Windows isn't rocket science! That's my other hobby!
Associate Expert - WinXP - Expert Zone
I have Norton 2002, but the message I am getting states:
Access to the file was denied
Unable to repair file
Tracy
S
Sandy
I managed to get infected with the an XP virus the first
time I went on line with my new computer and Norton just
would not play ball so to speak. It kept whizzing me off
line so any attempt to download anything to repair didn't
last long enough. I remember I had to enable the built in
XP firewall and download a repair tool from symantec and
also go to 'microsoft update' site to download the
critical files I think they call them. Fortunately i had
my old PC on line that wasn't troubled with this virus
because it was Windows 98 and I managed to download the
repair tool on this and transfer it on floppy disc to new
computer and run the file on that. This is probably a
load of non techi ramble. Think there is more than one XP
virus...one is 'blaster'. The one I had was the 'welchia'
virus.
Hope this is of some help but symantec site will be
helpful.
Sandy
time I went on line with my new computer and Norton just
would not play ball so to speak. It kept whizzing me off
line so any attempt to download anything to repair didn't
last long enough. I remember I had to enable the built in
XP firewall and download a repair tool from symantec and
also go to 'microsoft update' site to download the
critical files I think they call them. Fortunately i had
my old PC on line that wasn't troubled with this virus
because it was Windows 98 and I managed to download the
repair tool on this and transfer it on floppy disc to new
computer and run the file on that. This is probably a
load of non techi ramble. Think there is more than one XP
virus...one is 'blaster'. The one I had was the 'welchia'
virus.
Hope this is of some help but symantec site will be
helpful.
Sandy
M
Malke
Sandy said:I managed to get infected with the an XP virus the first
time I went on line with my new computer and Norton just
would not play ball so to speak. It kept whizzing me off
line so any attempt to download anything to repair didn't
last long enough. I remember I had to enable the built in
XP firewall and download a repair tool from symantec and
also go to 'microsoft update' site to download the
critical files I think they call them. Fortunately i had
my old PC on line that wasn't troubled with this virus
because it was Windows 98 and I managed to download the
repair tool on this and transfer it on floppy disc to new
computer and run the file on that. This is probably a
load of non techi ramble. Think there is more than one XP
virus...one is 'blaster'. The one I had was the 'welchia'
virus.
Hope this is of some help but symantec site will be
helpful.
Sandy
Actually, no the ramble isn't particularly useful. I'm not sure what you
would like to know. The Symantec website for virus information is
www.sarc.com. You can also download the Stinger virus removal tool from
AVERT here: http://vil.nai.com/vil/stinger/. In all cases, you will
want to disable System Restore first and then run the tool(s) in Safe
Mode.
Malke
S
skip
I have a computer with the same problem. This is not a rights issue,
I log in as admin and if I go under (documents and settings\user\local
settings\temporary internet files) there are 8 files that will not
delete. There are two application files running from
http://www.2nd-thought.com/files/slmss.exe and
http://www.2nd-thought.com/files/clrschpo38.exe. Then there are 5 html
files and one java script file
http://a.as-us.falkag.net/dat/00/00/57/32.js. These files seem to run
as soon as you open the browser and then the browser will close in
about 10 seconds. It does go out to the internet but closes on it's
own. I have tried to delete these files in DOS and in safe mode but
they don't show up in either. But when you go back in they are still
there. You don't get an error when you try to delete them either.
I log in as admin and if I go under (documents and settings\user\local
settings\temporary internet files) there are 8 files that will not
delete. There are two application files running from
http://www.2nd-thought.com/files/slmss.exe and
http://www.2nd-thought.com/files/clrschpo38.exe. Then there are 5 html
files and one java script file
http://a.as-us.falkag.net/dat/00/00/57/32.js. These files seem to run
as soon as you open the browser and then the browser will close in
about 10 seconds. It does go out to the internet but closes on it's
own. I have tried to delete these files in DOS and in safe mode but
they don't show up in either. But when you go back in they are still
there. You don't get an error when you try to delete them either.
george crockett said:Rick thanks but I don't know were to go to take ownership of the file.
the virus alert states: the object name is
C:\Documents and settings\Tracy\Local Setting...\slmss[1].exe
Object name; C:\Program files\STC\slmss.exe
Rick "Nutcase" Rogers said:Hi,
Sounds like you don't have permissions to those folders. Before you attempt
to delete, take ownership:
HOW TO: Take Ownership of a File or Folder in Windows XP [Q308421]
http://support.microsoft.com/?kbid=308421
--
Best of Luck,
Rick Rogers aka "Nutcase" MS-MVP - Win9x
Windows isn't rocket science! That's my other hobby!
Associate Expert - WinXP - Expert Zone
george crockett said:C:\program Files\STC\slmss.exe
C:\Documents and Settings\Tracy\Local Setting...\slmss[1].exe
HELP....
Hi George,
What folder does Norton indicate the infected file is in?
--
Best of Luck,
Rick Rogers aka "Nutcase" MS-MVP - Win9x
Windows isn't rocket science! That's my other hobby!
Associate Expert - WinXP - Expert Zone
I have Norton 2002, but the message I am getting states:
Access to the file was denied
Unable to repair file
Tracy
S
skip
I disabled the 3rd party extensions under the advanced tab in IE and
now the browser will stay open and seems to work fine. Those 8 files
are still there and I can't delete them but I'm not getting any
download. trojan messages from norton anymore.
now the browser will stay open and seems to work fine. Those 8 files
are still there and I can't delete them but I'm not getting any
download. trojan messages from norton anymore.
george crockett said:Rick thanks but I don't know were to go to take ownership of the file.
the virus alert states: the object name is
C:\Documents and settings\Tracy\Local Setting...\slmss[1].exe
Object name; C:\Program files\STC\slmss.exe
Rick "Nutcase" Rogers said:Hi,
Sounds like you don't have permissions to those folders. Before you attempt
to delete, take ownership:
HOW TO: Take Ownership of a File or Folder in Windows XP [Q308421]
http://support.microsoft.com/?kbid=308421
--
Best of Luck,
Rick Rogers aka "Nutcase" MS-MVP - Win9x
Windows isn't rocket science! That's my other hobby!
Associate Expert - WinXP - Expert Zone
george crockett said:C:\program Files\STC\slmss.exe
C:\Documents and Settings\Tracy\Local Setting...\slmss[1].exe
HELP....
Hi George,
What folder does Norton indicate the infected file is in?
--
Best of Luck,
Rick Rogers aka "Nutcase" MS-MVP - Win9x
Windows isn't rocket science! That's my other hobby!
Associate Expert - WinXP - Expert Zone
I have Norton 2002, but the message I am getting states:
Access to the file was denied
Unable to repair file
Tracy