Virus? knocked out modem and McAfee

[hangmeup]

I'm pretty sure I have a virus - my McAfee shows an icon on the toolbar but it is dead when you click on it, plus other applications/files are dissappearing or acting the same way.

I'm running windows XP - is there any way to re-connect my modem through DOS or safe mode in order to get the McAfee program re-loaded into my computer?

I used two different McAfee programs (downloaded from a different computer and installed via floppy) that did not detect Klez. One is called Stinger, the other was just their Klez eraser program. I think my only hope is to get the full program back on the machine, but without a modem I can't.

Thanks for your suggestions! I really hope it's not too late!

 

[AVChap]

You seem pretty sure that it's Klez that hit you. From experience, Stinger has been pretty successful in detecting most Klez variants. I haven't seen it miss a file that was infected on my network.

Try verifying which virus it is first, then you can go and look for the correct fix.

HTH, AVChap
... my $1 worth of advise, 2cents isn't enough due to inflation

 

[hangmeup]

The tech guys at McAfee were pretty sure it was Klez. I want to run the full scan so that I can tell for sure what it is, but without the modem I can't download VirusScan Online. I can buy the boxed version, but I am hoping there is some basic way I can re-connect to the internet. I'm also contemplating re-installing XP and seeing where that takes me.

I've had plenty of hard drives crash on me, etc. This is sure acting like a virus.

 

[InnoTech]

i would download the "klez fix" from them and run it a few times before installing any software. just my two cents!
"Jack of all trades. Master of none."

 

[hangmeup]

I have run several scans using various tools suggested by the forum users and McAfee tech support, but no luck detecting a virus. The last scan I tried was in WinXP command prompt using McAfee's latest DAT files. The results showed 115,867 total files, 49,805 clean, and 66,048 not scanned. Only about 15 files were listed, one was C:\Windows|System32\Config\Default....file could not be opened.

Next stop - reformat? Could it be that the 'virus' has been cleaned but the files remain damaged? Or might the virus still be lurking in the damaged files?

Any input will be greatly appreciated!

 

[InnoTech]

i'm sure you have disabled system restore before running scans, right? "Jack of all trades. Master of none."

 

[hangmeup]

Yes - I did disable system restore.

 

[turbo45]

Ok, try this.
1. Using someone else's computer go to

http://www.antivirus.com

(This is Trend Micro's Website, a virus software I highly recommend)
2. On their home page, they will have a section of the "Top 5 Viruses" or something similar. Klez.I should be listed there in their top 5.
3. Click on the link to Klez.I That link will take you to the technical page for Klez.I
4. Somewhere in the Klez.I information, you will find info. on how to manually delete Klez.I.
5 Print out the instructions.
6. Take the instructions home and use them on the suspicious machine. (oh yeah, disable restore before deleting files)
7. You should be able to delete enough of Klez.I to get your modem to work.
8. Do not re-enable Restore.
9. Good Luck.