Virus/Worms

BBush · Sep 29, 2004

My computer got a virus back in June. Since then I've
had so much trouble removing it. I've had the hard drive
reformatted twice & reloaded my programs. I used Norton
Internet Security 2004. Then when I got on the internet
last week, they popped up again. I downloaded, Panda,
Grisoft, Spybot, & Adware since my Norton
wouldn't/couldn't remove the virus. I talked to Symantec
for 3 hours removing everything relating to their
program. When I bought my Dell computer in March it came
with NAV 2004. Symantec said it was corrupted & had to
come off (which he helped me to do) & then reload the
Norton Internet Security. That worked fine for a while.
Then yesterday it said I had W32.spybot.worm & it
couldn't remove it. I've been downloading updates daily
& yesterday it showed that my autoprotection was disabled
& I couldn't enable it. What is the problem? Is
Symantec just useless? I'm tired of dealing with this.
Can you get a virus through your DSL modem? I'm at a
loss as to how to fix this problem & my computer has been
virtually useless the last 3 months. Any help would be
greatly appreciated.

Carey Frisch [MVP] · Sep 29, 2004

Scan your PC for the presence of viruses and spyware:

Download Ad-aware SE and scan your PC for the presence of spyware:
http://www.download.com/3000-2144-10045910.html?part=69274&subj=dlpage&tag=button

Symantec Security Check
http://security.symantec.com/sscv6/default.asp?langid=ie&venid=sym

Unexplained computer behavior may be caused by deceptive software
http://support.microsoft.com/?id=827315

Dealing with Unwanted Spyware and Parasites
http://www.mvps.org/winhelp2002/unwanted.htm

3 Steps to Help Insure Your PC is Protected:
http://www.microsoft.com/athome/security/protect/default.aspx

Frequently Asked Questions About Antivirus Software
http://www.microsoft.com/athome/security/protect/antivirus.mspx

Top 10 Reasons to Install Windows XP Service Pack 2 (SP2)
http://www.microsoft.com/windowsxp/sp2/topten.mspx

Support WebCast: How to obtain and install Microsoft Windows XP Service Pack 2
http://support.microsoft.com/default.aspx?kbid=885631

Symantec's Norton Internet Security 2005
http://www.symantecstore.com/dr/sat...840&PGRP=0&CACHE_ID=5549200000599570000074456

--
Carey Frisch
Microsoft MVP
Windows XP - Shell/User

Be Smart! Protect Your PC!
http://www.microsoft.com/athome/security/protect/default.aspx

-------------------------------------------------------------------------

:

| My computer got a virus back in June. Since then I've
| had so much trouble removing it. I've had the hard drive
| reformatted twice & reloaded my programs. I used Norton
| Internet Security 2004. Then when I got on the internet
| last week, they popped up again. I downloaded, Panda,
| Grisoft, Spybot, & Adware since my Norton
| wouldn't/couldn't remove the virus. I talked to Symantec
| for 3 hours removing everything relating to their
| program. When I bought my Dell computer in March it came
| with NAV 2004. Symantec said it was corrupted & had to
| come off (which he helped me to do) & then reload the
| Norton Internet Security. That worked fine for a while.
| Then yesterday it said I had W32.spybot.worm & it
| couldn't remove it. I've been downloading updates daily
| & yesterday it showed that my autoprotection was disabled
| & I couldn't enable it. What is the problem? Is
| Symantec just useless? I'm tired of dealing with this.
| Can you get a virus through your DSL modem? I'm at a
| loss as to how to fix this problem & my computer has been
| virtually useless the last 3 months. Any help would be
| greatly appreciated.

Guest · Sep 29, 2004

BBush said:
My computer got a virus back in June. Since then I've
had so much trouble removing it. I've had the hard drive
reformatted twice & reloaded my programs. I used Norton
Internet Security 2004. Then when I got on the internet
last week, they popped up again. I downloaded, Panda,
Grisoft, Spybot, & Adware since my Norton
wouldn't/couldn't remove the virus. I talked to Symantec
for 3 hours removing everything relating to their
program. When I bought my Dell computer in March it came
with NAV 2004. Symantec said it was corrupted & had to
come off (which he helped me to do) & then reload the
Norton Internet Security. That worked fine for a while.
Then yesterday it said I had W32.spybot.worm & it
couldn't remove it. I've been downloading updates daily
& yesterday it showed that my autoprotection was disabled
& I couldn't enable it. What is the problem? Is
Symantec just useless? I'm tired of dealing with this.
Can you get a virus through your DSL modem? I'm at a
loss as to how to fix this problem & my computer has been
virtually useless the last 3 months. Any help would be
greatly appreciated.

Do you use Kazza? or another P2P software?
http://www.grc.com/dcom/

http://securityresponse.symantec.com/avcenter/venc/data/w32.spybot.worm.html

David H. Lipman · Sep 30, 2004

1) Download the following two items...

Trend Sysclean Package
http://www.trendmicro.com/download/dcs.asp

Latest Trend signature files.
http://www.trendmicro.com/download/pattern.asp

2) If you are using WinME or WinXP, disable System Restore
http://vil.nai.com/vil/SystemHelpDocs/DisableSysRestore.htm
3) Reboot your PC into Safe Mode
4) Using the Trend Sysclean utility, perform a Full Scan of your platform and
clean/delete any infectors found
5) Restart your PC and perform a "final" Full Scan of your platform
6) If you are using WinME or WinXP,Re-enable System Restore and re-apply any
System Restore preferences, (e.g. HD space to use suggested 400 ~ 600MB),
7) Reboot your PC.
8) If you are using WinME or WinXP, create a new Restore point
9) Please report back your results

Dave

| My computer got a virus back in June. Since then I've
| had so much trouble removing it. I've had the hard drive
| reformatted twice & reloaded my programs. I used Norton
| Internet Security 2004. Then when I got on the internet
| last week, they popped up again. I downloaded, Panda,
| Grisoft, Spybot, & Adware since my Norton
| wouldn't/couldn't remove the virus. I talked to Symantec
| for 3 hours removing everything relating to their
| program. When I bought my Dell computer in March it came
| with NAV 2004. Symantec said it was corrupted & had to
| come off (which he helped me to do) & then reload the
| Norton Internet Security. That worked fine for a while.
| Then yesterday it said I had W32.spybot.worm & it
| couldn't remove it. I've been downloading updates daily
| & yesterday it showed that my autoprotection was disabled
| & I couldn't enable it. What is the problem? Is
| Symantec just useless? I'm tired of dealing with this.
| Can you get a virus through your DSL modem? I'm at a
| loss as to how to fix this problem & my computer has been
| virtually useless the last 3 months. Any help would be
| greatly appreciated.

Guest · Sep 30, 2004

No, don't know what these are.

-----Original Message-----

Do you use Kazza? or another P2P software?
http://www.grc.com/dcom/

http://securityresponse.symantec.com/avcenter/venc/data/w 32.spybot.worm.html
.

Guest · Sep 30, 2004

I'm not real computer literate so I don't fully
understand what you're telling me to do. Any chance you
can give me step by step instructions?

David H. Lipman · Sep 30, 2004

Guest · Sep 30, 2004

How awful of you to say that. I don't think it's an end user problem at all.
It's people like you that sell computers to people without giving them the
necessary information to keep their computer safe. That's the problem.

NoNoBadDog! · Sep 30, 2004

He gave you the proper information, in as useable format as can be given in
this forum, and you cannot even bother yourself to click on a link and
download the needed software...and you think it's not an end-user problem?
You need to take a humility pill and realize that no one is going to do it
for you...you have to learn for yourself.

Bobby

Guest · Sep 30, 2004

Thanks. The world needs more compassionate & tactful
people like you. FYI, I'm new to XP & haven't really had
the time or need to research it completely. But, once I
do something, I remember it & keep written notes. We're
not all brilliant like you!! Thank goodness.

Guest · Sep 30, 2004

Thanks for your support. See my reply to him.

-----Original Message-----
How awful of you to say that. I don't think it's an end user problem at all.
It's people like you that sell computers to people without giving them the
necessary information to keep their computer safe. That's the problem.

.

Guest · Sep 30, 2004

I agree. I wasn't asking him to do it for me. Since I'm
new to XP & haven't had the time or need to really delve
into it, I wasn't sure where to go for the first step of
System Restore. I thought maybe I could save a little
time (heaven forbid!) if he gave me that step. Of course
I can download the software & use the internet or else I
wouldn't be here in the world of "brilliant computer
users" like yourself. Humility? You better look up the
definition because I think you're the one that needs the
pill!!

David H. Lipman · Sep 30, 2004

I don't sell computers but I spend too many hours per week dealing with problems with
computers. It is too bad that you have to get a license to drive a car but need NOTHING to
own a computer. Then users whine when they have problems.

So where is YOUR help for the OP ?
What tips do YOU have for the OP ?

All I see from you is a complaint. I gave specific set of directions based upon tests and
experience in dealing with infectors. The OP didn't state "I don't understand step 3". The
OP replied with "Any chance you can give me step by step instructions?". What I can't do is
step out of the OPs monitor and hold his/her hand. I gave him/her "step by step
instructions".

Insteading of bitching or whining YOU hold the OPs hand or break down the instructions into
some long diatribe instruction set.

Dave

| How awful of you to say that. I don't think it's an end user problem at all.
| It's people like you that sell computers to people without giving them the
| necessary information to keep their computer safe. That's the problem.
|
| "David H. Lipman" wrote:
|
| > I just did.
| >
| > If you can't follow them, maybe you should give up using a computer.
| >
| > Dave
| >
| >
| >
| >
| > | > | I'm not real computer literate so I don't fully
| > | understand what you're telling me to do. Any chance you
| > | can give me step by step instructions?
| > |
| > | >-----Original Message-----
| > | >1) Download the following two items...
| > | >
| > | > Trend Sysclean Package
| > | > http://www.trendmicro.com/download/dcs.asp
| > | >
| > | > Latest Trend signature files.
| > | > http://www.trendmicro.com/download/pattern.asp
| > | >
| > | >2) If you are using WinME or WinXP, disable System
| > | Restore
| > | >
| > | http://vil.nai.com/vil/SystemHelpDocs/DisableSysRestore.ht
| > | m
| > | >3) Reboot your PC into Safe Mode
| > | >4) Using the Trend Sysclean utility, perform a Full
| > | Scan of your platform and
| > | > clean/delete any infectors found
| > | >5) Restart your PC and perform a "final" Full Scan
| > | of your platform
| > | >6) If you are using WinME or WinXP,Re-enable System
| > | Restore and re-apply any
| > | > System Restore preferences, (e.g. HD space
| > | to use suggested 400 ~ 600MB),
| > | >7) Reboot your PC.
| > | >8) If you are using WinME or WinXP, create a new
| > | Restore point
| > | >9) Please report back your results
| > | >
| > | >Dave
| > | >
| > | >
| > | >
| > | >
| > | >
| > | >
| > | message
| > | >| > | >| My computer got a virus back in June. Since then I've
| > | >| had so much trouble removing it. I've had the hard
| > | drive
| > | >| reformatted twice & reloaded my programs. I used
| > | Norton
| > | >| Internet Security 2004. Then when I got on the
| > | internet
| > | >| last week, they popped up again. I downloaded, Panda,
| > | >| Grisoft, Spybot, & Adware since my Norton
| > | >| wouldn't/couldn't remove the virus. I talked to
| > | Symantec
| > | >| for 3 hours removing everything relating to their
| > | >| program. When I bought my Dell computer in March it
| > | came
| > | >| with NAV 2004. Symantec said it was corrupted & had to
| > | >| come off (which he helped me to do) & then reload the
| > | >| Norton Internet Security. That worked fine for a
| > | while.
| > | >| Then yesterday it said I had W32.spybot.worm & it
| > | >| couldn't remove it. I've been downloading updates
| > | daily
| > | >| & yesterday it showed that my autoprotection was
| > | disabled
| > | >| & I couldn't enable it. What is the problem? Is
| > | >| Symantec just useless? I'm tired of dealing with this.
| > | >| Can you get a virus through your DSL modem? I'm at a
| > | >| loss as to how to fix this problem & my computer has
| > | been
| > | >| virtually useless the last 3 months. Any help would be
| > | >| greatly appreciated.
| > | >
| > | >
| > | >.
| > | >
| >
| >
| >

Guest · Oct 6, 2004

One trick I often use to deal with vermin is to remove the systems hard drive
and mount it in another system with a good working anti-virus and then scan
it from that system. The reason for this is because many viruses out now have
the ability to disable AV software and prevent it from being able to detect
or remove viruses and trojans. W32.NETSKY is a good example. You can also
try Trend Micro's Housecall which is an online scanner and can get around
this problem as well.
Next, many current viruses and trojans are not easily removed by most AV
software. Anti-virus (AV) is best suited for preventing infections rather
then removing them. Most AV software companies however, offer FREE removal
tools for specific vermin. Symantec, CA, and NOD32 have excellent removers.
Be aware that sometimes you may need to do manual registry edtiting and file
replacement depending on the vermin involved. The tools usually have
detailed instructions on how to remove the virus so READ IT first.
Next, I don't care for Symantec AV products that much either. I manage a
business network where we use Symantec AV and I have seen too much hostile
code get through. Symantec does have an almost daily manual update called
"Liveupdater" which I download and use to update my servers daily. Symantec
usually only updates their automatic "Live Update" service once a week
(usually Wednesday). This means your virus definitions can get up to a week
old and that's just too long these days. I discovered that last July when a
new version of W32.Beagle got loose in house and I had to spend the next 2
days cleaning it up. Personally I like E-Trust, Avast, or NOD32 AV software.

-RonH

David H. Lipman · Oct 6, 2004

While this is a good method, removing the hard drive and mounting it in another, however...
You *must* realize that this will clean files but will NOT clean the Registry of infector
made changes.

Dave

| One trick I often use to deal with vermin is to remove the systems hard drive
| and mount it in another system with a good working anti-virus and then scan
| it from that system. The reason for this is because many viruses out now have
| the ability to disable AV software and prevent it from being able to detect
| or remove viruses and trojans. W32.NETSKY is a good example. You can also
| try Trend Micro's Housecall which is an online scanner and can get around
| this problem as well.
| Next, many current viruses and trojans are not easily removed by most AV
| software. Anti-virus (AV) is best suited for preventing infections rather
| then removing them. Most AV software companies however, offer FREE removal
| tools for specific vermin. Symantec, CA, and NOD32 have excellent removers.
| Be aware that sometimes you may need to do manual registry edtiting and file
| replacement depending on the vermin involved. The tools usually have
| detailed instructions on how to remove the virus so READ IT first.
| Next, I don't care for Symantec AV products that much either. I manage a
| business network where we use Symantec AV and I have seen too much hostile
| code get through. Symantec does have an almost daily manual update called
| "Liveupdater" which I download and use to update my servers daily. Symantec
| usually only updates their automatic "Live Update" service once a week
| (usually Wednesday). This means your virus definitions can get up to a week
| old and that's just too long these days. I discovered that last July when a
| new version of W32.Beagle got loose in house and I had to spend the next 2
| days cleaning it up. Personally I like E-Trust, Avast, or NOD32 AV software.
|
|
| -RonH
|
| "BBush" wrote:
|
| > My computer got a virus back in June. Since then I've
| > had so much trouble removing it. I've had the hard drive
| > reformatted twice & reloaded my programs. I used Norton
| > Internet Security 2004. Then when I got on the internet
| > last week, they popped up again. I downloaded, Panda,
| > Grisoft, Spybot, & Adware since my Norton
| > wouldn't/couldn't remove the virus. I talked to Symantec
| > for 3 hours removing everything relating to their
| > program. When I bought my Dell computer in March it came
| > with NAV 2004. Symantec said it was corrupted & had to
| > come off (which he helped me to do) & then reload the
| > Norton Internet Security. That worked fine for a while.
| > Then yesterday it said I had W32.spybot.worm & it
| > couldn't remove it. I've been downloading updates daily
| > & yesterday it showed that my autoprotection was disabled
| > & I couldn't enable it. What is the problem? Is
| > Symantec just useless? I'm tired of dealing with this.
| > Can you get a virus through your DSL modem? I'm at a
| > loss as to how to fix this problem & my computer has been
| > virtually useless the last 3 months. Any help would be
| > greatly appreciated.
| >

tidserv backdoor rouge virus on netbook	9	Oct 6, 2009
AVG and my virus	3	Jan 15, 2021
NortonAntivirus Alert	1	Nov 16, 2006
XP Security turning off virus protection	6	Apr 23, 2006
Win XP Home SP2 security center issue	1	Mar 21, 2007
Anti Virus Problems	3	Jan 13, 2005
Virus? Can't run regedit	2	Jan 9, 2005
Can't remove virus	1	May 11, 2004

Virus/Worms

BBush

Carey Frisch [MVP]

Guest

David H. Lipman

Guest

Guest

David H. Lipman

Guest

NoNoBadDog!

Guest

Guest

Guest

David H. Lipman

Guest

David H. Lipman

Ask a Question

Similar Threads