Re: BloodHound.Exploit.6 need help

From: Sue (noone_at_comcast.net)
Date: 02/09/05

  • Next message: David H. Lipman: "Re: BloodHound.Exploit.6 need help"
    Date: Wed, 9 Feb 2005 14:23:46 -0500
    
    

    David,

    I followed instructions, no virus appeared, I am going to assume I was never
    infected with the bloodhound, unless it is imbedded somewhere..
    Thanks
    Sue
    "David H. Lipman" <DLipman~nospam~@Verizon.Net> wrote in message
    news:eJUZrZUDFHA.520@TK2MSFTNGP09.phx.gbl...
    > Dump the contents of the IE Temporary Internet Folder cache (TIF)
    >
    > start --> settings --> control panel --> internet options --> delete files
    >
    > 1) If you are using WinME or WinXP, disable System Restore
    > http://vil.nai.com/vil/SystemHelpDocs/DisableSysRestore.htm
    > 2) Reboot your PC into Safe Mode and shutdown as many applications as
    > possible
    > 3) Using your NAV software, perform a Full Scan of your platform and
    > clean/delete any
    > infectors found
    > 4) Restart your PC and perform a "final" Full Scan of your platform
    > 5) If you are using WinME or WinXP,Re-enable System Restore and
    > re-apply any
    > System Restore preferences, (e.g. HD space to use suggested 200 ~
    > 400MB),
    > 6) Reboot your PC.
    > 7) If you are using WinME or WinXP, create a new Restore point
    >
    >
    > * * * Please report back your results * * *
    >
    > --
    > Dave
    > http://www.claymania.com/removal-trojan-adware.html
    >
    >
    >
    >
    > "Sue" <noone@comcast.net> wrote in message
    > news:eQMF%23uRDFHA.2180@TK2MSFTNGP12.phx.gbl...
    > | New Gateway computer, Norton's AV, updates twice a week, Scan once a
    > week,
    > | Lavasoft, Microsoft AntiSpyware installed.
    > |
    > | Was surfing a migraine forum and the following popped up from Norton's.
    > | AutoProtect Bloodhound.Exploit.6, Access
    > | denied file, Owner, YOUR-693befca6d, source:
    > | C\documents and settings\owner\localsettings\temporaryinternet
    > | files\content.ies\ch270iej\x_1 htm
    > | same as above with this following:
    > | repair failed, file.
    > | Then again same as the first, but different ie numbers.
    > | One, it did not quarantine it, I am using XPSP2, used every scan on the
    > net,
    > | ie Trend, lava, Symantec, etc. Shows I have no virus or Trojan. It is
    > | sitting in my NAV reports activity log. I would not allow me to
    > quarantine
    > | it.
    > |
    > | Still new to XP, can't locate my local settings, I empty my temporary
    > | internet files by right clicking on internet explorer icon.
    > | When I go to the my computer etc and locate my TIF, it says this,
    > Content
    > | IES, and nothing is in the folder.
    > | My concern is I have a virus and can't locate it, even though all scans
    > show
    > | otherwise.
    > |
    > | I use this for work, so I know about security, I did not open any email
    > | attachment, I never do, regardless of who it is from.
    > | Please advise.
    > |
    > | Should I delete from the activity log?
    > |
    > | Thanks
    > |
    > |
    > |
    >
    >


  • Next message: David H. Lipman: "Re: BloodHound.Exploit.6 need help"