Virus Detected Cannot get rid of!

G

Guest

My free AVG virus program alerted me to a virus and said
it healed it. But my screen shows "Warning your in
danger" a red x on the task bar says my computer is
infected and takes me to AV Gold Antivirus. I also get
a ! in a triangle that says my ISP might be tracking my
private info.

I have turned off restore, run Adaware, Spybot and AVG
after undating.

AVG shows two viruses Trojan Horses Puper.C and Puper.D
but says it heals them.

An online Symantec virus detection says I have
Download.Trojan and SecurityRisk.Oleadm and the
Trojan.Prova. It also says I have some adware problems
but a search cannot find those files.

Any suggestions?
 
C

Carey Frisch [MVP]

You may wish to visit the virus removal newsgroup experts and repost your question:
news://msnews.microsoft.com/microsoft.public.security.virus

--
Carey Frisch
Microsoft MVP
Windows XP - Shell/User
Microsoft Newsgroups

Get Windows XP Service Pack 2 with Advanced Security Technologies:
http://www.microsoft.com/athome/security/protect/windowsxp/choose.mspx

-------------------------------------------------------------------------------------------

:

| My free AVG virus program alerted me to a virus and said
| it healed it. But my screen shows "Warning your in
| danger" a red x on the task bar says my computer is
| infected and takes me to AV Gold Antivirus. I also get
| a ! in a triangle that says my ISP might be tracking my
| private info.
|
| I have turned off restore, run Adaware, Spybot and AVG
| after undating.
|
| AVG shows two viruses Trojan Horses Puper.C and Puper.D
| but says it heals them.
|
| An online Symantec virus detection says I have
| Download.Trojan and SecurityRisk.Oleadm and the
| Trojan.Prova. It also says I have some adware problems
| but a search cannot find those files.
|
| Any suggestions?
 
D

David H. Lipman

From: "Mike S" <Mike (e-mail address removed)>

| My free AVG virus program alerted me to a virus and said
| it healed it. But my screen shows "Warning your in
| danger" a red x on the task bar says my computer is
| infected and takes me to AV Gold Antivirus. I also get
| a ! in a triangle that says my ISP might be tracking my
| private info.
|
| I have turned off restore, run Adaware, Spybot and AVG
| after undating.
|
| AVG shows two viruses Trojan Horses Puper.C and Puper.D
| but says it heals them.
|
| An online Symantec virus detection says I have
| Download.Trojan and SecurityRisk.Oleadm and the
| Trojan.Prova. It also says I have some adware problems
| but a search cannot find those files.
|
| Any suggestions?

There are anti virus News Groups specifically for this type of discussion.

microsoft.public.scripting.virus.discussion
microsoft.public.security.virus
alt.comp.virus
alt.comp.anti-virus

You failed to state the versions of the software.

Currently, the sofware you listed are...

AVG v7.xxx
SpyBot S&D v1.4
Ad-Aware SE v1.06

So if you used Adaware6, SpyBot S&D v1.2 or AVG v6 then they need to be replaced with their
newer couterparts and updated.

Please perform the following....

Dump the contents of the IE Temporary Internet Folder cache (TIF)
Start --> Settings --> Control Panel --> Internet Options --> Delete Files

Dump the contents of the Mozilla FireFox Cache { if you use FireFox }
Tools --> Options --> Privacy --> Cache --> Clear


Download CLEAN.EXE from the URL --
http://www.ik-cs.com/programs/virtools/clean.exe

It is a self-extracting ZIP file that contains the Kixtart Script Interpreter
{ http://kixtart.org Kixtart is CareWare } three batch files, two Kixtart scripts, two Link
(.lnk) files and a PDF instruction file.

GETFILES.BAT -- For downloading (FTP) the files needed to run the McAfee Command Line
Scanner. You may have to disable your FireWall or allow FTP.EXE to go through your FireWall
to allow the FTP utility to download the needed files

CLEAN.BAT -- For running within Windows after running c:\mcafee\GetFiles.BAT. If you choose
to scan again at a future date, run this batch file. It will automatically check the date
of the McAfee DAT files and if it is a couple of days old, it will download (FTP) the latest
signature files and install them before performing the scan.

DOSCLEAN.BAT -- For use on a Win9x/ME PC or on a Win2K/WinXP PC that is using FAT32 after
you have booted from an Emergency Boot Disk or DOS disk and have already executed;
c:\mcafee\GetFiles.BAT from within Windows. DOS disk boot images can be obtained from;
http://www.bootdisk.com/bootdisk.htm

I need you to perform the following...

Execute; CLEAN.EXE
Choose; Unzip
Choose; Close

Execute; c:\mcafee\GetFiles.BAT
{ or Double-click on 'GetFiles Link' in c:\mcafee }

Reboot the PC into Safe Mode [F8 key during boot]

Shutdown as many applications as possible !
It would also help for you to read - "How to perform a clean boot in Windows XP"
http://support.microsoft.com/kb/310353

Execute; c:\mcafee\CLEAN.BAT
{ or Double-click on 'Clean Link' in c:\mcafee }

A final report in HTML format called C:\mcafee\ScanReport.HTML will be generated. At the
end of the scan, it will be displayed in your browser (Opera, FireFox or Internet Explorer).
It is suggested that you move the report out of c:\mcafee before performing another scan.
It would be a good idea to scan in Safe Mode and in Normal Mode and save a copy of the HTML
report for each session.


* * * Please report back your results * * *
 
N

NoStop

Mike said:
My free AVG virus program alerted me to a virus and said
it healed it. But my screen shows "Warning your in
danger" a red x on the task bar says my computer is
infected and takes me to AV Gold Antivirus. I also get
a ! in a triangle that says my ISP might be tracking my
private info.

I have turned off restore, run Adaware, Spybot and AVG
after undating.

AVG shows two viruses Trojan Horses Puper.C and Puper.D
but says it heals them.

An online Symantec virus detection says I have
Download.Trojan and SecurityRisk.Oleadm and the
Trojan.Prova. It also says I have some adware problems
but a search cannot find those files.

Any suggestions?

Switch to a more secure operating system that is immune to picking up
viruses like this. If you find this impossible, then I'm afraid you're
going to be fighting viruses forever.
 
L

Leythos

Switch to a more secure operating system that is immune to picking up
viruses like this. If you find this impossible, then I'm afraid you're
going to be fighting viruses forever.

What OS is secure from viruses and exploits that might impact a user?
Not HPUX, not Apple OS/X, not Windows, not Linux, not Unix, the closest
I've seen is BSD.
 
D

David H. Lipman

From: "Leythos" <[email protected]>

|
| What OS is secure from viruses and exploits that might impact a user?
| Not HPUX, not Apple OS/X, not Windows, not Linux, not Unix, the closest
| I've seen is BSD.
|
| --
| --
| (e-mail address removed)
| remove 999 in order to email me

Netware. But that's a NOS.
 
N

NoStop

Leythos said:
What OS is secure from viruses and exploits that might impact a user?
Not HPUX, not Apple OS/X, not Windows, not Linux, not Unix, the closest
I've seen is BSD.

I haven't heard of anyone getting a virus running Linux, recently. Have you?
And if so, was it able to disable the operating system like so many Windoze
viruses can?
 
D

David H. Lipman

From: "NoStop" <[email protected]>


| I haven't heard of anyone getting a virus running Linux, recently. Have you?
| And if so, was it able to disable the operating system like so many Windoze
| viruses can?
|
| --
| Re: Micro$oft OneCare:
| "When a company is run like the mafia why would you not expect them to
| progress to charging protection money." NF

Yes... I have.

There are those that are Linux specific and there are those that are for Unix constructs
that Unix/Linux share.
 
N

NoStop

David said:
From: "NoStop" <[email protected]>


| I haven't heard of anyone getting a virus running Linux, recently. Have
| you? And if so, was it able to disable the operating system like so many
| Windoze viruses can?
|
| --
| Re: Micro$oft OneCare:
| "When a company is run like the mafia why would you not expect them to
| progress to charging protection money." NF

Yes... I have.

There are those that are Linux specific and there are those that are for
Unix constructs that Unix/Linux share.

Give me the name of this virus and what it is purported to do and whether
it's been in the wild and doing damage say in the last 6 months.
 
L

Leythos

I haven't heard of anyone getting a virus running Linux, recently. Have you?
And if so, was it able to disable the operating system like so many Windoze
viruses can?

Notice I also said "Exploits" and if you can't find any exploits then
you are not even try to look. Linux and applications have exploits that
allow the systems to be rooted - not to mention all the lamers that run
as root.
 
N

NoStop

Leythos said:
Notice I also said "Exploits" and if you can't find any exploits then
you are not even try to look. Linux and applications have exploits that
allow the systems to be rooted - not to mention all the lamers that run
as root.

Well, you replied to me and I said "viruses" and not "exploits". I never
suggested that a Linux system can't be hacked and that wasn't the context
of this discussion.

VirusLibrary reports 5,220 highly active viruses today ...

http://www.viruslibrary.com/virusinfo/index.htm

It also reports 7 (that's right -seven) viruses known to affect Linux boxes.
Of those 7, 6 of them were tested in a lab in 2002 and long since of no
consequence to the Linux community. One other exists, BUT one would have to
run it as root to have it do any real damage.

So, as I said ... "I haven't heard of anyone getting a virus running Linux,
recently." Have you?
 
D

David H. Lipman

From: "NoStop" <[email protected]>


| Give me the name of this virus and what it is purported to do and whether
| it's been in the wild and doing damage say in the last 6 months.
|
| --
| Re: Micro$oft OneCare:
| "When a company is run like the mafia why would you not expect them to
| progress to charging protection money." NF

Here's a *ood* start !
mix of Trojans and viruses (some worms)

Linux/Glaurung.a -- http://vil.nai.com/vil/content/v_132391.htm
Linux/BackDoor-Caca -- http://vil.nai.com/vil/content/v_131344.htm
Linux/Amdcrash -- http://vil.nai.com/vil/content/v_99389.htm
Linux/Rpcmountd -- http://vil.nai.com/vil/content/v_99391.htm
Linux/Exploit-Woot -- http://vil.nai.com/vil/content/v_99395.htm
Linux/Slapper.worm -- http://vil.nai.com/vil/content/v_114008.htm
Linux/Godog.lnkv -- http://vil.nai.com/vil/content/v_129992.htm
Linux/PWS-LogX -- http://vil.nai.com/vil/content/v_131343.htm
Linux/Backdoor-Pbot -- http://vil.nai.com/vil/content/v_130460.htm
Linux/Phobi.b -- http://vil.nai.com/vil/content/v_130286.htm
Linux/Adrastea -- http://vil.nai.com/vil/content/v_127289.htm
 
D

David H. Lipman

From: "Leythos" <[email protected]>


|
| Notice I also said "Exploits" and if you can't find any exploits then
| you are not even try to look. Linux and applications have exploits that
| allow the systems to be rooted - not to mention all the lamers that run
| as root.
|
| --
| --
| (e-mail address removed)
| remove 999 in order to email me

Here are some Linux exploits...

Linux/Exploit-Race30 -- http://vil.nai.com/vil/content/v_132905.htm
Linux/Exploit-Racezion -- http://vil.nai.com/vil/content/v_133392.htm
Linux/Exploit-Apache -- http://vil.nai.com/vil/content/v_103619.htm
Linux/Exploit-Nhttpd -- http://vil.nai.com/vil/content/v_103272.htm
Linux/Exploit-Shellcode -- http://vil.nai.com/vil/content/v_103091.htm
Linux/Exploit-Mmap -- http://vil.nai.com/vil/content/v_130291.htm
Linux/Exploit-Moos -- http://vil.nai.com/vil/content/v_130360.htm
Linux/Exploit-Bysin -- http://vil.nai.com/vil/content/v_130359.htm
 
N

NoStop

NoStop said:
Well, you replied to me and I said "viruses" and not "exploits". I never
suggested that a Linux system can't be hacked and that wasn't the context
of this discussion.

VirusLibrary reports 5,220 highly active viruses today ...

http://www.viruslibrary.com/virusinfo/index.htm

It also reports 7 (that's right -seven) viruses known to affect Linux
boxes. Of those 7, 6 of them were tested in a lab in 2002 and long since
of no consequence to the Linux community. One other exists, BUT one would
have to run it as root to have it do any real damage.

So, as I said ... "I haven't heard of anyone getting a virus running
Linux, recently." Have you?
I should add, that the site I mentioned above reports on 10 new Windoze
viruses on June 4, 2005 and only 7 Linux viruses discovered since back in
2002. So comparing or trying to compare Linux vulnerability to viruses to
Windoze vulnerability is senseless. It is safe for 99.9% of Linux users to
conclude they are safe from viruses. It is also safe to conclude that 100%
of Windoze users are not safe from viruses without making a major and
constant effort to try and protect their computers from viruses with the
very good possibility that the antivirus software they are depending on
will just miss some of the new viruses coming out each day. It is also safe
to conclude, due to the way the 2 operating systems are fashioned, the
damages that could happen to ones computer once attacked by a virus is
negligible for a Linux users and more often than not, very damaging to a
Windoze computer. See ...

http://librenix.com/?inode=21

and this ...

http://www.theregister.co.uk/2003/10/06/linux_vs_windows_viruses/

for an explanation as to why this is the case.
 
N

NoStop

David said:
From: "Leythos" <[email protected]>


|
| Notice I also said "Exploits" and if you can't find any exploits then
| you are not even try to look. Linux and applications have exploits that
| allow the systems to be rooted - not to mention all the lamers that run
| as root.
|
| --
| --
| (e-mail address removed)
| remove 999 in order to email me

Here are some Linux exploits...

Linux/Exploit-Race30 -- http://vil.nai.com/vil/content/v_132905.htm

risk assessment: low
must be manually run by user to do anything
non-issue
risk assessment: low
no details from McAfee who is in the business of trying to sell antivirus
software
I asked if you'd ever heard of anyone getting a virus recently running
Linux. You didn't answer the question.

Long since patched.
risk assessment: low
no details ... more b.s. ... have never heard of any Linux user getting this
virus. Have you?
ditto - found over a year ago.
All these viruses are non-issues for Linux users. I don't know a Linux user
that runs any antivirus software unless to protect Windozes boxes on their
network. Just because viruses targetting Linux have been found in the labs
doesn't mean anything in terms of are there viruses out there in the wild
bringing down Linux computers. I have heard of NO reports anywhere and I
try and keep up with Linux security issues. Compare this with 5220 highly
active Windoze viruses today and what I originally suggested to the OP
holds true. Dump Windoze and use another OS that is immune to viruses.
 
D

David H. Lipman

From: "NoStop" <[email protected]>


| All these viruses are non-issues for Linux users. I don't know a Linux user
| that runs any antivirus software unless to protect Windozes boxes on their
| network. Just because viruses targetting Linux have been found in the labs
| doesn't mean anything in terms of are there viruses out there in the wild
| bringing down Linux computers. I have heard of NO reports anywhere and I
| try and keep up with Linux security issues. Compare this with 5220 highly
| active Windoze viruses today and what I originally suggested to the OP
| holds true. Dump Windoze and use another OS that is immune to viruses.
|
| --
| Re: Micro$oft OneCare:
| "When a company is run like the mafia why would you not expect them to
| progress to charging protection money." NF

They are NOT viruses. I repeat, they are not viruses. They are Exploits of vulnerabilities
and just because a ptach exists, it doesn't mean that the user is patched.

Windows is targeted more because there are more Win32 platforms. If Linux had 50% market
share or more then Linux would be the preferred platform to write exploit code and malware
for.

What I provided is just a sampling. There are *more* !

Now stop being a WinXP NG Troll if you are so high on Linux !
 
N

NoStop

David said:
From: "NoStop" <[email protected]>


| All these viruses are non-issues for Linux users. I don't know a Linux
| user that runs any antivirus software unless to protect Windozes boxes
| on their network. Just because viruses targetting Linux have been found
| in the labs doesn't mean anything in terms of are there viruses out
| there in the wild bringing down Linux computers. I have heard of NO
| reports anywhere and I try and keep up with Linux security issues.
| Compare this with 5220 highly active Windoze viruses today and what I
| originally suggested to the OP holds true. Dump Windoze and use another
| OS that is immune to viruses.
|
| --
| Re: Micro$oft OneCare:
| "When a company is run like the mafia why would you not expect them to
| progress to charging protection money." NF

They are NOT viruses. I repeat, they are not viruses. They are Exploits
of vulnerabilities and just because a ptach exists, it doesn't mean that
the user is patched.

Thanks for clarifying. I asked originally if you could name any active
viruses. So I guess you cannot. That was the context of the thread that you
replied to.
 
D

David H. Lipman

From: "NoStop" <[email protected]>


|
| Thanks for clarifying. I asked originally if you could name any active
| viruses. So I guess you cannot. That was the context of the thread that you
| replied to.
|
| --
| Re: Micro$oft OneCare:
| "When a company is run like the mafia why would you not expect them to
| progress to charging protection money." NF

I did post an assortment of viruses worms, and Trojans. It was posted elsewhere in the
thread. After I posted them, I saw Leythos' post about exploits and I posted them as well.
 
K

Kevin Brunt (Fat B@stard)

If you haven't paid anything for the AV software then it is time to get a one by payibg for it. How about Symantec? If you can't afford it then download a pirated one. The old versions do not require activation and you cn still get updates automatically. I am using Systems Works 2002 andit works fine on my XP Pro system.

Free software are a waste of time. We always say that there is nothing called "FREE LUNCH" these days. When you take a blonde woman out, you expect her to try your big bed with you! I have always been fond of American women but they are very few of the in London!

Fat Kev
 

Ask a Question

Want to reply to this thread or ask your own question?

You'll need to choose a username for the site, which only take a couple of moments. After that, you can post your question and our members will help you out.

Ask a Question

Similar Threads

Virus Problem! 20
Can't get rid of Trojan Horse 5
Trouble with Trojans 3
I got a virus! 5
virus in system32 2
Help Please AVG can't get rid of virus 23
I have a virus 4
How to get rid of Exploit Virus VLm-6 8

Top