W32.Stration.AD@mm

  • Thread starter Thread starter Guest
  • Start date Start date
G

Guest

I have contracted this virus. I'm using Win 2000. I've deleted everything
from the registry but can't delete e1.dll. I've tried Win 95 boot disk and
almost every version of SAFE mode and can't delete this file.

Does anyone have a clue as to how to start my computer so as to be able to
delete this file?

Thanks in advance.

Ken
 
Ken said:
I have contracted this virus. I'm using Win 2000. I've deleted everything
from the registry but can't delete e1.dll. I've tried Win 95 boot disk and
almost every version of SAFE mode and can't delete this file.
Click to expand...

Since I don't know what antimalware programs you've used:

Go through these general malware removal steps systematically -
http://www.elephantboycomputers.com/page2.html#Removing_Malware

Include scanning with either Sysclean or Multi_AV, plus Ewido. Do all
prep/finishing work and follow instructions to do all scans in Safe Mode.

When all else fails, run HijackThis and post your log in one of the
specialty forums listed at the link above (not here, please).

If the procedures look too complex - and there is no shame in admitting this
isn't your cup of tea - take the machine to a professional computer repair
shop (not your local version of BigStoreUSA).

Malke
 
From: "Ken" <[email protected]>

| I have contracted this virus. I'm using Win 2000. I've deleted everything
| from the registry but can't delete e1.dll. I've tried Win 95 boot disk and
| almost every version of SAFE mode and can't delete this file.
|
| Does anyone have a clue as to how to start my computer so as to be able to
| delete this file?
|
| Thanks in advance.
|
| Ken

There are anti virus News Groups specifically for this type of discussion.
Additionally you noted that you are using Windows 2000. Please realize that there are
specific News Group for specific questions. Win2K questions are asked in Win2K News Groups
and questions about malware are *best* posed in anti malware News Groups.

microsoft.public.security.virus
alt.comp.virus
alt.comp.anti-virus


Download MULTI_AV.EXE from the URL --
http://www.ik-cs.com/programs/virtools/Multi_AV.exe

To use this utility, perform the following...
Execute; Multi_AV.exe { Note: You must use the default folder C:\AV-CLS }
Choose; Unzip
Choose; Close

Execute; C:\AV-CLS\StartMenu.BAT
{ or Double-click on 'Start Menu' in C:\AV-CLS }

NOTE: You may have to disable your software FireWall or allow WGET.EXE to go through your
FireWall to allow it to download the needed AV vendor related files.

C:\AV-CLS\StartMenu.BAT -- { or Double-click on 'Start Menu' in C:\AV-CLS}
This will bring up the initial menu of choices and should be executed in Normal Mode.
This way all the components can be downloaded from each AV vendor's web site.
The choices are; Sophos, Trend, McAfee, Kaspersky, Exit this menu and Reboot the PC.

You can choose to go to each menu item and just download the needed files or you can
download the files and perform a scan in Normal Mode. Once you have downloaded the files
needed for each scanner you want to use, you should reboot the PC into Safe Mode [F8 key
during boot] and re-run the menu again and choose which scanner you want to run in Safe
Mode. It is suggested to run the scanners in both Safe Mode and Normal Mode.

When the menu is displayed hitting 'H' or 'h' will bring up a more comprehensive PDF help
file. http://www.ik-cs.com/multi-av.htm

Additional Instructions:
http://pcdid.com/Multi_AV.htm


* * * Please report back your results * * *
 
I have contracted this virus. I'm using Win 2000. I've deleted everything
from the registry but can't delete e1.dll. I've tried Win 95 boot disk and
almost every version of SAFE mode and can't delete this file.

Does anyone have a clue as to how to start my computer so as to be able to
delete this file?

Thanks in advance.

Ken
Click to expand...

That's a double reason to ask why you're posting this to an XP OS newsgroup.
Post to a win2000 group or better yet a virus removal group.
 
Thanks, I'll give it a try.

Malke said:
Since I don't know what antimalware programs you've used:

Go through these general malware removal steps systematically -
http://www.elephantboycomputers.com/page2.html#Removing_Malware

Include scanning with either Sysclean or Multi_AV, plus Ewido. Do all
prep/finishing work and follow instructions to do all scans in Safe Mode.

When all else fails, run HijackThis and post your log in one of the
specialty forums listed at the link above (not here, please).

If the procedures look too complex - and there is no shame in admitting this
isn't your cup of tea - take the machine to a professional computer repair
shop (not your local version of BigStoreUSA).

Malke
--
MS-MVP Windows Shell/User
Elephant Boy Computers
www.elephantboycomputers.com
"Don't Panic"
Click to expand...
 
From: "Ken" <[email protected]>

| If I could have found Win2K section, I would have posted it there but couldn't.
|

You didn't try hard enough... microsoft.public.win2000.general
But like I said, an anti virus News Group was most apropos to this problem.

Now you know for the future.
 
The question was: How do I start Win2K so I can go in and delete the file
e1.dll. I'd already deleted all the registry entries and the other files on
the computer but could not get rid of e1.dll. I followed the directions on
two web sites but could not start Win2K and delete file due to access error.
 
The question was: How do I start Win2K so I can go in and delete the file
e1.dll. I'd already deleted all the registry entries and the other files
on
the computer but could not get rid of e1.dll. I followed the directions on
two web sites but could not start Win2K and delete file due to access
error.
Click to expand...

You're asking this question in the wrong group.
 
On Mon, 25 Sep 2006 04:23:01 -0700, Ken
The question was: How do I start Win2K so I can go in and delete the file
e1.dll. I'd already deleted all the registry entries and the other files on
the computer but could not get rid of e1.dll. I followed the directions on
two web sites but could not start Win2K and delete file due to access error.
Click to expand...

You don't - not if the .DLL is active and can defend itself or take
punitive action against you.

If FATxx and < 137G HD, go in from DOS mode e.g. boot diskette

If NTFS or > 137G, make a Bart CDR from some known-good XP system and
go it with that, or you can drop the HD into another W2k or XP system.
The latter's "easier" but may put the host PC at risk, so I wouldn't.


------------ ----- --- -- - - - -
Click to expand...
Drugs are usually safe. Inject? (Y/n)
 
Just use Mcafee virus scan from download.com. There is a 15 day trial.
It finds and removes all instances of the w32/stration virus.
 
Back
Top