virus non detected !

[Stephane P.]

Hello,

It seems that my PC is infected by a virus which is not detected by my
anti-virus protection. I would appreciate your help.
I have Win 2000 SP4, 256 Mo RAM, NIS, NAV 2004.

As everything was working propoerly, I suddenly discoverd the the "start
menu" didn't show anything else than "windows update". Some functions of
opened programs where not anymore availalbe. Moreover, I discoverd that my C
drive was shared. No warning message from NAV. This happened during several
days but not always after restarting.
Some days later, when restarting, I had an error message mentioning that
virtual memory was unsufficient and the porcedure how to change it.
Impossible to change. Max size is 20 Mo.
NAV and NIS are not loaded and therefore, I feel quite more vulnerable.
Memory message occure regularly and I cannot open several softs together.
Does anyone knows what can this be and how to get rid of this problem ?
I have tries Trend Micro but the program starts but is terminated after 1 or
2 minutes while scanning and mentionning low memory.

Any help would be appreciated.

Thanks a lot

Stéphane P.

 

[Shay Glenn]

Hi there... can you make sure hat norton is up to date... go here
http://securityresponse.symantec.com/avcenter/download/pages/US-N95.html

Scan a suspect file using this to see if Kaspersky knows of it:
http://www.kaspersky.com/scanforvirus

Also this could be a new virus so try to submit it to Norton via the norton
antivirus program :
http://service1.symantec.com/SUPPORT/nav.nsf/docid/2000031615501306

Also send a compressed and encripted sample of the file to:
(e-mail address removed)

See:
To create an email
1.. Create an email.
2.. Type Submission in the Subject field.
3.. Include the following information in the body of the email
a.. Operating System
b.. Name
c.. Address
d.. City
e.. State
f.. Zip/Country code
g.. Province
h.. Country
i.. Phone number
j.. A detailed description of the symptoms that you observed.

To create a password-protected zip file
Do the following to create a password-protected zip file that contains the
suspicious file/files. It is important that potentially infected files be
zipped and password protected to prevent the potential new virus from being
mistakenly sent to others. This process is part of the Symantec best
practices procedure when working with potentially infected files. If you are
running Norton AntiVirus or Symantec AntiVirus in a corporate environment,
then zipping and password protecting a potentially infected file will also
allow the file to be sent through your network security system without being
removed.

--------------------------------------------------------------------------------
Note: These steps apply to Winzip. If you have another zip utility, consult
your program documentation for help zipping and password protecting the
potentially infected file.

--------------------------------------------------------------------------------

1.. Open Windows Explorer.
2.. Locate the suspicious file or files.
3.. If there is only one file, then right-click the file, and then click
"Add to zip."
4.. Click I agree.
5.. Click New.
6.. Change the "Create" location to Desktop, type Submission and then
click OK.
7.. Click Options and then Password.
8.. Type infected and then click OK. Reenter the same password, and then
click OK again.
9.. You should see a zip file named Submission.zip on the Desktop.
10.. If you want to submit more than one file, then do the following for
each file.
11.. Locate the file and then right-click the file, and click "Add to
zip."
12.. Click I agree.
13.. Click Open.
14.. Change the "Create" location to Desktop, locate and click
Submission.zip and then click Open.
15.. Click Add.

To attach the zip file to the email and send the email to Security Response
1.. Attach the Submission.zip file to the email and send it to
(e-mail address removed)
2.. The submitted file will be scanned by the Symantec automated response
system and you will receive an email response with a tracking number.

 

[Shay Glenn]

Check this out:
http://vil.nai.com/vil/stinger/

 

[Stephane P.]

Hi,
Thank for your prompt reply.
Nevertheless, how can I send a file to Norton or Kapersky when I don't know
if any file is infected.
I have also tried Stinger but nothing was found.

Stéphane P.

 

[Shay Glenn]

Is norton updating?
http://securityresponse.symantec.com/avcenter/download/pages/US-N95.html

Try this:
http://www.trendmicro.com/ftp/products/tsc/sysclean.com

 

[Shay Glenn]

Sorry... u'll need this aswell:
http://www.trendmicro.com/download/dcs.asp
Pattern File
http://www.trendmicro.com/ftp/products/pattern/lpt341.zip

 

[Steven Cook]

Hello,

It seems that my PC is infected by a virus which is not detected by my
anti-virus protection. I would appreciate your help.
I have Win 2000 SP4, 256 Mo RAM, NIS, NAV 2004.

As everything was working propoerly, I suddenly discoverd the the "start
menu" didn't show anything else than "windows update". Some functions of
opened programs where not anymore availalbe. Moreover, I discoverd that my C
drive was shared. No warning message from NAV. This happened during several
days but not always after restarting.
Some days later, when restarting, I had an error message mentioning that
virtual memory was unsufficient and the porcedure how to change it.
Impossible to change. Max size is 20 Mo.
NAV and NIS are not loaded and therefore, I feel quite more vulnerable.
Memory message occure regularly and I cannot open several softs together.
Does anyone knows what can this be and how to get rid of this problem ?
I have tries Trend Micro but the program starts but is terminated after 1 or
2 minutes while scanning and mentionning low memory.

Any help would be appreciated.

Thanks a lot

Stéphane P.

How do you connect to the web? I wonder if, rather than having a virus,
you're PC may have been hacked.

 

[Stephane P.]

Hi,

I am connected through a ADSL modem.
Maybe hacked. How to know ?
Thanks