Urgent: How do I disable Prockill

[SilverB]

Sorry to post again, but I got no replies earlier and I am desperate
to get to the bottom of this. I think the virus Prockill is
preventing me from installing and running AVG or McAfee TVD on a
clients PC. McAfee will install, but shuts down after running for
10secs.

If anyone can offer advice on how it can be disabled allowing a virus
checker to be run, I'd be most grateful.

I reckon the machine has other viruses as it tries to start up OE and
send loads of e-mails soon after it booted.

Thanks

SilverB

 

[Bill]

Sorry to post again, but I got no replies earlier and I am desperate
to get to the bottom of this. I think the virus Prockill is

http://vil.nai.com/vil/content/v_100119.htm

Google took exactly 5 seconds.

 

[Conor Turton]

Sorry to post again, but I got no replies earlier and I am desperate
to get to the bottom of this. I think the virus Prockill is
preventing me from installing and running AVG or McAfee TVD on a
clients PC. McAfee will install, but shuts down after running for
10secs.

If anyone can offer advice on how it can be disabled allowing a virus
checker to be run, I'd be most grateful.

I reckon the machine has other viruses as it tries to start up OE and
send loads of e-mails soon after it booted.

If you're running on a system with a FAT16/FAT32 filesystem you could
download and use the DOS based F-Prot. Alternatively go to
http://housecall.trendmicro.com/ and see if their free online scanner
can do it.

 

[SilverB]

Thanks for the suggestions Conor, but the machine is NTFS and also
won't connect to the internet at the moment. (Dont think I'd want to
plug the cable modem in anyway with OE wanting to send out loads of
e-mails :-(

SilverB

 

[Ray]

http://vil.nai.com/vil/content/v_100119.htm

Removal Instructions
All Users:
Use current engine and DAT files for detection and removal.

Additional Windows ME/XP removal considerations
Top of Page


I appreciate the sentiment Bill but what I've been trying to get over is the
fact that the machine WON'T let me install and run any of the virus checkers
(I've tried). I've already seen the instructions on the Norton AV site, (and
I appreciate that Google was very fast to come up with some results ;-), but
as you can see all it suggests is using the current engine and dat
files.......been there done that and failed miserably. It will install, but
after about 10 seconds re-infects the AV software and shuts itself down.
It's really frustrating, but there must be some way around it (other than
calling it a day and re-installing everything).

SilverB

 

[null]

http://vil.nai.com/vil/content/v_100119.htm

Removal Instructions
All Users:
Use current engine and DAT files for detection and removal.

Additional Windows ME/XP removal considerations
Top of Page


I appreciate the sentiment Bill but what I've been trying to get over is the
fact that the machine WON'T let me install and run any of the virus checkers
(I've tried). I've already seen the instructions on the Norton AV site, (and
I appreciate that Google was very fast to come up with some results ;-), but
as you can see all it suggests is using the current engine and dat
files.......been there done that and failed miserably. It will install, but
after about 10 seconds re-infects the AV software and shuts itself down.
It's really frustrating, but there must be some way around it (other than
calling it a day and re-installing everything).

You must manually prevent the Trojan from running at startup. Boot
into Safe mode and rename winlogon.exe to winlogon.old and also delete
the Registry run key entry. Then reboot the PC.


Art
http://www.epix.net/~artnpeg

 

[SilverB]

Thanks I'll try this. Do you mean to delete the registry entry for winlogon?