Re: BloodHound.Exploit.6 need help
From: Sue (noone_at_comcast.net)
Date: Wed, 9 Feb 2005 14:23:46 -0500
I followed instructions, no virus appeared, I am going to assume I was never
infected with the bloodhound, unless it is imbedded somewhere..
"David H. Lipman" <DLipman~nospam~@Verizon.Net> wrote in message
> Dump the contents of the IE Temporary Internet Folder cache (TIF)
> start --> settings --> control panel --> internet options --> delete files
> 1) If you are using WinME or WinXP, disable System Restore
> 2) Reboot your PC into Safe Mode and shutdown as many applications as
> 3) Using your NAV software, perform a Full Scan of your platform and
> clean/delete any
> infectors found
> 4) Restart your PC and perform a "final" Full Scan of your platform
> 5) If you are using WinME or WinXP,Re-enable System Restore and
> re-apply any
> System Restore preferences, (e.g. HD space to use suggested 200 ~
> 6) Reboot your PC.
> 7) If you are using WinME or WinXP, create a new Restore point
> * * * Please report back your results * * *
> "Sue" <firstname.lastname@example.org> wrote in message
> | New Gateway computer, Norton's AV, updates twice a week, Scan once a
> | Lavasoft, Microsoft AntiSpyware installed.
> | Was surfing a migraine forum and the following popped up from Norton's.
> | AutoProtect Bloodhound.Exploit.6, Access
> | denied file, Owner, YOUR-693befca6d, source:
> | C\documents and settings\owner\localsettings\temporaryinternet
> | files\content.ies\ch270iej\x_1 htm
> | same as above with this following:
> | repair failed, file.
> | Then again same as the first, but different ie numbers.
> | One, it did not quarantine it, I am using XPSP2, used every scan on the
> | ie Trend, lava, Symantec, etc. Shows I have no virus or Trojan. It is
> | sitting in my NAV reports activity log. I would not allow me to
> | it.
> | Still new to XP, can't locate my local settings, I empty my temporary
> | internet files by right clicking on internet explorer icon.
> | When I go to the my computer etc and locate my TIF, it says this,
> | IES, and nothing is in the folder.
> | My concern is I have a virus and can't locate it, even though all scans
> | otherwise.
> | I use this for work, so I know about security, I did not open any email
> | attachment, I never do, regardless of who it is from.
> | Please advise.
> | Should I delete from the activity log?
> | Thanks