help in eliminating a weird virus

[Guest_imported]

Greetings,

Yesterday, my cousin accidentally downloaded a .scr file (it has a weird name, i think a random filename) from my email and executed it from my computer. Now, my antivirus program can't work. Whenever i open it, the antivirus program just won't start and sometimes shut down in a middle of a virus scan process. Then, i discovered that inside my program files, there are strange .exe files created out of nowhere. Most of them are randomly named.I try 2 delete those exe files but they juz keep reappearing and with a different name.
It there any way to erase the virus? it starts annoying me...

 

[edfair]

You might try running the housecall virus checker. Think you will find it at

http://www.antivirus.com.

Or you could look in the FAQs and trace back to the virus help FAQs in another that forum. Ed Fair
unixstuff@juno.com
Any advice I give is my best judgement based on my interpretation of the facts you supply. Help increase my knowledge by providing some feedback, good or bad, on any advice I have given.

 

[ChrisHirst]

http://housecall.antivirus.com

for the Online Scanner at Trend Micro

http://www.grisoft.com

for AVG, a free anti virus product that works if you keep it up to date

Chris.

 

[Kento]

Installing avg won't do any good since this virus disables antivirus programs.

havenus, run the online scan. You probably have the klez worm. If the scan detects it go to this link and type in klez and hit go and you'll find removal info and removal tools to help get rid of it.

http://www.symantec.com/avcenter/vinfodb.html

If the online scan won't run post back and tell me what operating system you have.

 

[yizhar]

HI.

A good way to scan your disk is to attach it as "slave" to a clean computer with AV installed and updated, and then scan all files for virusses.

Bye
Yizhar Hurwitz

http://come.to/yizhar

http://teachers.sivan.co.il/yizhar

 

[ChrisHirst]

Kento,
Trend micro's online scanner at housecall will also remove the virus problem THEN you can install the AV product.


Chris.

 

[Neo81]

Try to boot into dos mode from the Windows 9X startup menu and use the Dos scan for you particular v/scan program... there is usually switches e.g (mcafee) "scanpm c: /all /clean" which will clean all files off the virus that you have accuired


Later
NEo81 >:O>

 

[Kento]

I know that Chris that's why I also suggested running the online scan. But why should he/she install avg when they have Norton? The virus must have disabled Norton that's why it won't run and neither will any other installed av program until the virus is removed. When the virus is removed either manually or via the online scan then Norton will work again. There's no reason to install avg.

 

[2ffat]

It may be possible that this is a new variant of the Elkern virus. See

http://www.sophos.com/virusinfo/analyses/w32elkernc.html

. James P. Cottingham

I am the Unknown lead by the Unknowing.
I have done so much with so little
for so long that I am now qualified
to do anything with nothing.

 

[ChrisHirst]

Hi Kento
I have a big down on NAV, Currently 7 out of 10 virus loaded mails arriving at our mail server are from people using NAV, either on mail servers or single user desktops, The last 3 machines I have cleaned for people have had up to date Nortons AV 'protection' so any confidence I had for Norton has evaporated. AVG seems ideal for the majority of users as it will update without any user prompting, Ideal for most users who seem to think that AV protection is only needed by heavy users, Until they get hit of course, and the install config is enough to satisfy all but the totally paranoid,

Chris.

 

[Kento]

You know I just realized that "havenus" doesn't say that he uses Norton. LOL I must have gotten a Norton reference from another thread and it stuck in my mind. Oh well!

Anyway to reply, I would disagree with your opinion of NAV and so would many others I know who use it. I think it's excellent and would recommend it to anyone. It's detected a few different viruses in incoming emails on my pc. Just because you or someone you know may have had a poor experience with it doesn't mean others will and in my opinion people shouldn't suggest to others using it that they not use it especially if they're not having problems with either it or whatever av program they're using.

I know more than a few people on other boards who would disagree with you about avg's effectiveness. Here's just one:

http://discussions.virtualdr.com/Forum2/HTML/057667.html

But opinions on av programs vary. It depends on who you talk to. I cruise many pc help boards every day and i've seen users have problems with just about any antivirus program you could name. I've yet to see an av program that detects all viruses for everybody and causes no system problems for everyone using it. No such av program exists as far as i'm concerned. I've seen InoculateIT, AVG, Norton, Mcafee, Pc-cillin, Panda, Tauscan, and others all miss detecting viruses or trojans that they should detect and have the definitions for. Why that is who knows. It could very well be that the definitions are corrupt. Virus definition files can become corrupt just like any other files in your computer.

If a person is having uncorrectable problems with a certain av program that's not related to a virus then yes they should try another one but if they're not having trouble with it then they should leave things be.

 

[kammy]

Hi...
I need HELP! A couple of weeks ago I took my computer into the shop to have the 'klez' virus cleaned from it. Now.. almost daily I continue to receive emails that are infected with 'klez'. My NORTON antivirus catches them, but I am wondering where the heck all these emails are coming from.
Any ideas before I spend another fortune trying to fix this.
thanks,
K.

 

[Guest_imported]

One of the key things to do with any antivirus package is to disable the settings that "save before cleaning" which puts the infected files on the harddisk, cleans and restores the file, leaving the uncleaned virus on the disk. This is a big problem with Inoculan and Norton. The products will work, but you MUST adjust settings vs. a default install which is not as safe.