-----Original Message-----
Hello, I wondered if you could help plz, I have a virus
on my pc, located in (cdrive
progfiles\comet\systems\DM\bin\dmserver.exe).
I am new to computing and don't know how to locate these
files, other viruses have been healed or sent to
vault,but this one dosen't seem to be able to be repaired
through AVG protecter.
Regards G. Blakeley
.
You have "comet curser" Spyware!Use all of the programs
linked below
http://www.safer-networking.org/ Spybot
www.javacoolsoftware.com/sbdownload.html Spywareblaster
http://www.wilderssecurity.net/spywareguard.html
http://www.lavasoft.de/ Ad-aware
http://www.merijn.org/downloads.html (CWS)cool web
shedder and hijack this
http://www.spywareinfo.com/downloads/bhod/ BHO Demon
CWShredder (Line 313)
http://www.kellys-korner-
xp.com/xp_tweaks.htm
www.spywareinfo.com/forums/
A describtion of comet curser and how to remove it
manually if the above programs don't.(Very unlikely)
Comet DMServer
Overview
Category: Downloader: A program designed to retrieve and
install additional files, when run. Most will be
configured to retrieve from a designated web or FTP site.
Similar Pests: Downloader
Origins
Group: Comet Systems
Date of Origin: November, 2003
Distribution
Prevalence: Comet DMServer: 0.0% of all pest reports (16
per 100,000 reports) More Info
Clot Factor: Comet DMServer: On average, 53 objects
detected in each machine
The "Clot Factor" is a measure of how much a pest "gums
up" a machine by adding registry entries, files, and
directories. As more objects are placed in a machine,
manual removal becomes more difficult and more error-
prone.
Countries Affected: In the past three months, we have
received reports of Comet DMServer in Australia, Bahrain,
Belgium, Canada, Colombia, Denmark, Estonia, France,
Germany, Greece, Hong Kong, Iran, Israel, Italy, Japan,
Morocco, Netherlands, New Zealand, Norway, Poland,
Portugal, Saudi Arabia, Spain, Sweden, Switzerland,
Taiwan, Thailand, Turkey, United Kingdom, United States.
Growth: Comet DMServer: Insufficient data to report growth
Operation
Storage Required: at least 321KB
Detection and Removal
Automatic Removal: PestPatrol detects this.
PestPatrol removes this.
Manual Removal: Follow these steps to remove Comet
DMServer from your machine. Begin by backing up your
registry and your system, and/or setting a Restore Point,
to prevent trouble if you make a mistake.
Stop Running Processes:
Kill these running processes with Task Manager:
programfilesdir+\comets~1\dm\bin\dmserver.exedmserver.exe
Remove AutoRun Reference:
Go To the key
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersi
on\Run.
Unregister DLLs:
Unregister these DLLs with Regsvr32, then reboot:
programfilesdir+\comets~1\dm\bin\cssecure.dll
programfilesdir+\comets~1\dm\bin\dmproxy.dlldmproxy.dll
Clean Registry:
Remove these registry items (if present) with RegEdit:
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversi
on\run\dm_server
Remove Files:
Remove these files (if present) with Windows Explorer:
programfilesdir+\comets~1\dm\bin\cssecure.dll
programfilesdir+\comets~1\dm\bin\dmproxy.dll
programfilesdir+\comets~1\dm\bin\dmserver.exedmserver.exe
Remove Directories:
Remove these directories (if present) with Windows
Explorer:
programfilesdir+\comets~1
