virus attack-help please

[Guest]

I have got a reconditioned comp with win xp ie 6, 4 weeks ago. A couple of
days

ago I installed IE 7. One day later while working the Internet, A message
came up

saying: "threat detected" I sent the infected file to the virus vault, but
the same

message kept coming up with different files, which I sent to the vault. I
then

uninstalled the infected files and ran AVG 7.5. It found 2 more which I sent
to the

vault. I also ran lavasoft ad-aware. *Now the comp won't connect to the
Internet

by clicking on IE icon--web pages in links can't connect-win update from start

button can't connect*. The only way to get the Internet is from
start-prog-explorer.

Can any one please give me some advise as to what to do to restore the comp
to

it's unvirused condition?

 

[Guest]

I have got a reconditioned comp with win xp ie 6, 4 weeks ago. A couple of
days

ago I installed IE 7. One day later while working the Internet, A message
came up

saying: "threat detected" I sent the infected file to the virus vault, but
the same

message kept coming up with different files, which I sent to the vault. I
then

uninstalled the infected files and ran AVG 7.5. It found 2 more which I sent
to the

vault. I also ran lavasoft ad-aware. *Now the comp won't connect to the
Internet

by clicking on IE icon--web pages in links can't connect-win update from start

button can't connect*. The only way to get the Internet is from
start-prog-explorer.

Can any one please give me some advise as to what to do to restore the comp
to

it's unvirused condition?

Connections >> Double click Internet Options.
On the IE properties windows you will see these Taps:
General | Security | Privacy | Content | Connections | Programs |
Advanced
Under General Tab clear your History, Internet Files and Cookies.
Then click on Advanced tab and scroll down to under the Browsing Option:
[&] Browsing
[ ] Enable Third-Party browser extensions (Req Rest) uncheck this box.
[ ] Disable script Debugging (internet Explorer) <= check this box
[ ] Disable Script Debugging (Other) <= check this box

Then click on Programs Tab and click Manage Add-Ons and Disable all non
Verified Add-Ons (You should Renable them later one-by-one and see the
culprit and update it or remove it.

2.... And also for malware from here:
http://onecare.live.com/site/en-gb/default.htm?s_cid=sah
http://onecare.live.com/standard/en-gb/default.htm
http://www.lavasoft.com/products/ad-aware_se_personal.php
http://www.safer-networking.org ; for Spybot S&D

Run a scan from here on-line:
http://www.sophos.com
http://www3.ca.com/securityadvisor/virusinfo/scan.aspx
http://security.symantec.com/sscv6/default.asp?productid=symhome&langid=ie&venid=sym
Download Avast Cleaner from here:
http://www.avast.com/eng/avast-virus-cleaner.html
Lots of tools to download and disinfect your machine:
http://www.bitdefender.co.uk/site/Downloads/browseFreeRemovalTool/
http://free.grisoft.com/doc/5390/lng/us/tpl/v5
=How to perform a clean boot procedure to prevent background programs from
interfering with a game or a program that you currently use
http://support.microsoft.com/kb/331796
Download the Hijackthis and send the report to one of
many
forums for analysis and troubleshooting:
When all else fails, HijackThis v1.99.1
(http://aumha.org/downloads/hijackthis.zip) is the preferred tool to use.
It will help you to both identify and remove any hijackware/spyware. Post
your log to http://aumha.net/viewforum.php?f=30,
http://castlecops.com/forum67.html,
http://forums.subratam.org/index.php?showforum=7, or other appropriate
forums for expert analysis, not here.

Then download this tool to remove all entries for this program:
http://www.ccleaner.com
HTH.
Let us know.
Regards,
nass

 

[Peter Foldes]

nass

You should change the Hijack This link to the new version 2.02

--
Peter

Please Reply to Newsgroup for the benefit of others
Requests for assistance by email can not and will not be acknowledged.

I have got a reconditioned comp with win xp ie 6, 4 weeks ago. A couple of
days

ago I installed IE 7. One day later while working the Internet, A message
came up

saying: "threat detected" I sent the infected file to the virus vault, but
the same

message kept coming up with different files, which I sent to the vault. I
then

uninstalled the infected files and ran AVG 7.5. It found 2 more which I sent
to the

vault. I also ran lavasoft ad-aware. *Now the comp won't connect to the
Internet

by clicking on IE icon--web pages in links can't connect-win update from start

button can't connect*. The only way to get the Internet is from
start-prog-explorer.

Can any one please give me some advise as to what to do to restore the comp
to

it's unvirused condition?

Connections >> Double click Internet Options.
On the IE properties windows you will see these Taps:
General | Security | Privacy | Content | Connections | Programs |
Advanced
Under General Tab clear your History, Internet Files and Cookies.
Then click on Advanced tab and scroll down to under the Browsing Option:
[&] Browsing
[ ] Enable Third-Party browser extensions (Req Rest) uncheck this box.
[ ] Disable script Debugging (internet Explorer) <= check this box
[ ] Disable Script Debugging (Other) <= check this box

Then click on Programs Tab and click Manage Add-Ons and Disable all non
Verified Add-Ons (You should Renable them later one-by-one and see the
culprit and update it or remove it.

2.... And also for malware from here:
http://onecare.live.com/site/en-gb/default.htm?s_cid=sah
http://onecare.live.com/standard/en-gb/default.htm
http://www.lavasoft.com/products/ad-aware_se_personal.php
http://www.safer-networking.org ; for Spybot S&D

Run a scan from here on-line:
http://www.sophos.com
http://www3.ca.com/securityadvisor/virusinfo/scan.aspx
http://security.symantec.com/sscv6/default.asp?productid=symhome&langid=ie&venid=sym
Download Avast Cleaner from here:
http://www.avast.com/eng/avast-virus-cleaner.html
Lots of tools to download and disinfect your machine:
http://www.bitdefender.co.uk/site/Downloads/browseFreeRemovalTool/
http://free.grisoft.com/doc/5390/lng/us/tpl/v5
=How to perform a clean boot procedure to prevent background programs from
interfering with a game or a program that you currently use
http://support.microsoft.com/kb/331796
Download the Hijackthis and send the report to one of
many
forums for analysis and troubleshooting:
When all else fails, HijackThis v1.99.1
(http://aumha.org/downloads/hijackthis.zip) is the preferred tool to use.
It will help you to both identify and remove any hijackware/spyware. Post
your log to http://aumha.net/viewforum.php?f=30,
http://castlecops.com/forum67.html,
http://forums.subratam.org/index.php?showforum=7, or other appropriate
forums for expert analysis, not here.

Then download this tool to remove all entries for this program:
http://www.ccleaner.com
HTH.
Let us know.
Regards,
nass

 

[Guest]

Thanks Peter, I always would like to do that, but either way version 1.99 or
2.02 will do and the link I think updated for version 2.02 trend micro.
Again thanks Peter.
nass

nass

You should change the Hijack This link to the new version 2.02

--
Peter

Please Reply to Newsgroup for the benefit of others
Requests for assistance by email can not and will not be acknowledged.

I have got a reconditioned comp with win xp ie 6, 4 weeks ago. A couple of
days

ago I installed IE 7. One day later while working the Internet, A message
came up

saying: "threat detected" I sent the infected file to the virus vault, but
the same

message kept coming up with different files, which I sent to the vault. I
then

uninstalled the infected files and ran AVG 7.5. It found 2 more which I sent
to the

vault. I also ran lavasoft ad-aware. *Now the comp won't connect to the
Internet

by clicking on IE icon--web pages in links can't connect-win update from start

button can't connect*. The only way to get the Internet is from
start-prog-explorer.

Can any one please give me some advise as to what to do to restore the comp
to

it's unvirused condition?

Connections >> Double click Internet Options.
On the IE properties windows you will see these Taps:
General | Security | Privacy | Content | Connections | Programs |
Advanced
Under General Tab clear your History, Internet Files and Cookies.
Then click on Advanced tab and scroll down to under the Browsing Option:
[&] Browsing
[ ] Enable Third-Party browser extensions (Req Rest) uncheck this box.
[ ] Disable script Debugging (internet Explorer) <= check this box
[ ] Disable Script Debugging (Other) <= check this box

Then click on Programs Tab and click Manage Add-Ons and Disable all non
Verified Add-Ons (You should Renable them later one-by-one and see the
culprit and update it or remove it.

2.... And also for malware from here:
http://onecare.live.com/site/en-gb/default.htm?s_cid=sah
http://onecare.live.com/standard/en-gb/default.htm
http://www.lavasoft.com/products/ad-aware_se_personal.php
http://www.safer-networking.org ; for Spybot S&D

Run a scan from here on-line:
http://www.sophos.com
http://www3.ca.com/securityadvisor/virusinfo/scan.aspx
http://security.symantec.com/sscv6/default.asp?productid=symhome&langid=ie&venid=sym
Download Avast Cleaner from here:
http://www.avast.com/eng/avast-virus-cleaner.html
Lots of tools to download and disinfect your machine:
http://www.bitdefender.co.uk/site/Downloads/browseFreeRemovalTool/
http://free.grisoft.com/doc/5390/lng/us/tpl/v5
=How to perform a clean boot procedure to prevent background programs from
interfering with a game or a program that you currently use
http://support.microsoft.com/kb/331796
Download the Hijackthis and send the report to one of
many
forums for analysis and troubleshooting:
When all else fails, HijackThis v1.99.1
(http://aumha.org/downloads/hijackthis.zip) is the preferred tool to use.
It will help you to both identify and remove any hijackware/spyware. Post
your log to http://aumha.net/viewforum.php?f=30,
http://castlecops.com/forum67.html,
http://forums.subratam.org/index.php?showforum=7, or other appropriate
forums for expert analysis, not here.

Then download this tool to remove all entries for this program:
http://www.ccleaner.com
HTH.
Let us know.
Regards,
nass