Re: BloodHound.Exploit.6 need help

Tech-Archive recommends: Fix windows errors by optimizing your registry

From: David H. Lipman (DLipman~nospam~_at_Verizon.Net)
Date: 02/07/05


Date: Mon, 7 Feb 2005 13:54:09 -0500

Dump the contents of the IE Temporary Internet Folder cache (TIF)

start --> settings --> control panel --> internet options --> delete files

1) If you are using WinME or WinXP, disable System Restore
            http://vil.nai.com/vil/SystemHelpDocs/DisableSysRestore.htm
2) Reboot your PC into Safe Mode and shutdown as many applications as possible
3) Using your NAV software, perform a Full Scan of your platform and clean/delete any
         infectors found
4) Restart your PC and perform a "final" Full Scan of your platform
5) If you are using WinME or WinXP,Re-enable System Restore and re-apply any
         System Restore preferences, (e.g. HD space to use suggested 200 ~ 400MB),
6) Reboot your PC.
7) If you are using WinME or WinXP, create a new Restore point

* * * Please report back your results * * *

-- 
Dave
http://www.claymania.com/removal-trojan-adware.html
"Sue" <noone@comcast.net> wrote in message news:eQMF%23uRDFHA.2180@TK2MSFTNGP12.phx.gbl...
| New Gateway computer, Norton's AV, updates twice a week, Scan once a week,
| Lavasoft, Microsoft AntiSpyware installed.
|
| Was surfing a migraine forum and the following popped up from Norton's.
| AutoProtect Bloodhound.Exploit.6, Access
| denied file, Owner, YOUR-693befca6d, source:
| C\documents and settings\owner\localsettings\temporaryinternet
| files\content.ies\ch270iej\x_1 htm
| same as above with this following:
| repair failed, file.
| Then again same as the first, but different ie numbers.
| One, it did not quarantine it, I am using XPSP2, used every scan on the net,
| ie Trend, lava, Symantec, etc. Shows I have no virus or Trojan. It is
| sitting in my NAV reports activity log. I would not allow me to quarantine
| it.
|
| Still new to XP, can't locate my local settings,  I empty my temporary
| internet files by right clicking on internet explorer icon.
| When I go to the my computer etc and locate my TIF, it says this, Content
| IES, and nothing is in the folder.
| My concern is I have a virus and can't locate it, even though all scans show
| otherwise.
|
| I use this for work, so I know about security, I did not open any email
| attachment, I never do, regardless of who it is from.
| Please advise.
|
| Should I delete from the activity log?
|
| Thanks
|
|
|


Relevant Pages

  • Re: 2 explorer.exe in my task manager
    ... If you are using WinME or WinXP, disable System Restore ... Reboot your PC into Safe Mode ...
    (microsoft.public.windowsxp.help_and_support)
  • Re: 2 explorer.exe in my task manager
    ... If you are using WinME or WinXP, disable System Restore ... Reboot your PC into Safe Mode ...
    (microsoft.public.windowsxp.general)
  • Re: I know there is somthing wrong!
    ... I can't hold your hand over the Internet. ... instruction number by instruction number. ... |> 3) If you are using WinME or WinXP, disable System Restore ...
    (microsoft.public.security.virus)
  • Re: Virus/Worms
    ... Download the following two items... ... If you are using WinME or WinXP, disable System Restore ... Reboot your PC into Safe Mode ...
    (microsoft.public.windowsxp.security_admin)
  • Re: 2 explorer.exe in my task manager
    ... > 3) If you are using WinME or WinXP, disable System Restore ... > 4) Reboot your PC into Safe Mode ...
    (microsoft.public.windowsxp.help_and_support)