Replicator Virus

[Matt]

Hey.

I have a virus on my computer that has created a hidden
folder that cannot be found and is constantly replicating
files into it. I've run Norton Antivirus on it and it's
deleted over 1500 of the files out of the replicator
folder, but there's still files it can't delete and it's
still replicating.

Does anyone know what the virus is exactly and how to
combat it? Any downloads out there to fight against it?

Anything anyone knows would be very useful, as I don't
know anything about viruses.

Matt.

 

[Rick \Nutcase\ Rogers]

Hi,

1) Download stinger from http://vil.nai.com/vil/stinger/

2) Restart the system and load safe mode, log on as administrator.

3) Run stinger.

--
Best of Luck,

Rick Rogers, aka "Nutcase" - Microsoft MVP

Associate Expert - WindowsXP Expert Zone

Windows help - www.rickrogers.org

 

[David H. Lipman]

The first thing to know is that there are specific News Groups for virus discussions...

microsoft.public.scripting.virus.discussion
microsoft.public.security.virus
alt.comp.virus
alt.comp.anti-virus

No one knows what the virus is exactly and how to combat it because you have not provided us
the name of the virus that NAV/SAV has found so all that can be provided is generic
information.

1) Disable System Restore
http://vil.nai.com/vil/SystemHelpDocs/DisableSysRestore.htm
2) Reboot your PC into Safe Mode
3) Using your NAV software, perform a Full Scan of your platform and clean/delete any
infectors found
4) Restart your PC and perform a "final" Full Scan of your platform
5) Re-enable System Restore and re-apply any System Restore preferences,
(e.g. HD space to use suggested 400 ~ 600MB),
6) Reboot your PC.
7) Create a new Restore point
8) Please report back your results

Dave




| Hey.
|
| I have a virus on my computer that has created a hidden
| folder that cannot be found and is constantly replicating
| files into it. I've run Norton Antivirus on it and it's
| deleted over 1500 of the files out of the replicator
| folder, but there's still files it can't delete and it's
| still replicating.
|
| Does anyone know what the virus is exactly and how to
| combat it? Any downloads out there to fight against it?
|
| Anything anyone knows would be very useful, as I don't
| know anything about viruses.
|
| Matt.

 

[David H. Lipman]

Rick:

Stinger only targets ~45 infectors and their variants. it should ONLY be used when you know
the infector is indeed one of the targeted infectors.

So since you suggested Stinger and the OP did provide a name to the infector, which of the
targeted infectors of Stinger do you propose is on the OP's platform ?

Dave




| Hi,
|
| 1) Download stinger from http://vil.nai.com/vil/stinger/
|
| 2) Restart the system and load safe mode, log on as administrator.
|
| 3) Run stinger.
|
| --
| Best of Luck,
|
| Rick Rogers, aka "Nutcase" - Microsoft MVP
|
| Associate Expert - WindowsXP Expert Zone
|
| Windows help - www.rickrogers.org

 

[Rick \Nutcase\ Rogers]

Hi David,

There is no harm to running stinger if the user is not infected with one of
the listed bugs or its variants. Since 99% of bugs seen in this and other
groups come in waves, it is a safe bet that stinger will catch it (provided
that the user downloads the latest version of stinger). To rationalize, the
first bet is to run stinger and catch the latest round of no-good-nicks
(best done from Safe mode to minimize interference and to keep the bugsfrom
being TSR's that cannot be removed). If it fails, then we do it the hard
way, but again, most of the bugs like this are a recent spate, and stinger
is perhaps the best tool that NA has ever released for catching these (as I
certainly would never, ever recommend their AVproduct).

--
Best of Luck,

Rick Rogers, aka "Nutcase" - Microsoft MVP

Associate Expert - WindowsXP Expert Zone

Windows help - www.rickrogers.org

 

[Morituri-Max]

Hey.

I have a virus on my computer that has created a hidden
folder that cannot be found and is constantly replicating
files into it. I've run Norton Antivirus on it and it's
deleted over 1500 of the files out of the replicator
folder, but there's still files it can't delete and it's
still replicating.

Does anyone know what the virus is exactly and how to
combat it? Any downloads out there to fight against it?

Not knowing the name, it is pretty hopeless for us to guess how to deal with
it..