Re: Attn: Rock
From: Rock (rock_at_comcast.nospam.net)
Date: 09/20/04
- Next message: Peter Frank: "Q815411_WXP_SP2_x86_DEU.exe"
- Previous message: Rock: "Re: An internal application error has occured. Help please"
- In reply to: Rachel K: "Re: Attn: Rock"
- Messages sorted by: [ date ] [ thread ]
Date: Sun, 19 Sep 2004 17:47:44 -0700
Rachel K wrote:
>>-----Original Message-----
>>Rachel K wrote:
>>
>>
>>>Hi Rock,
>>>
>>>I went through the steps you gave me below in regards
>
> to
>
>>>my post on Sept 18th at 6:18 "Infected files that are
>>>archived, virus program wont remove" and it didn't
>
> work.
>
>>>The 5 infected files are still present and my
>
> antivirus
>
>>>wont delete them. I am not computer savvy and this
>
> very
>
>>>frustrating. Any other suggestions?
>>>
>>>Rachel
>>>
>>>
>>>When I run my virus software (Anti Vir XP)it gives me
>
> 5
>
>>>>infected files that are archived and cannot be removed
>>>
>>>or
>>>
>>>
>>>>deleted. I can't do anything in Windows Explorer
>>>
>>>because
>>>
>>>
>>>>it shuts down and restarts immediately and my IE 6
>>>
>>>shuts
>>>
>>>
>>>>down frequently. How do I get rid of something that
>
> is
>
>>>>archived when I can't stay in Windows Explorer or on
>>>
>>>the
>>>
>>>
>>>>Internet for very long?
>>>>
>>>>Thanks
>>>
>>>
>>>Start with Trend Micro's Sysclean. After downloading
>
> the
>
>>>program and
>>>signature file turn off system restore, boot into safe
>>>mode and run it.
>>> Then boot back into normal mode, turn system
>
> restore,
>
>>>and do a
>>>complete scan with your AV product.
>>>
>>>Trend Micro Sysclean
>>>http://www.trendmicro.com/download/dcs.asp
>>>
>>>Trend Micro Signature File
>>>http://www.trendmicro.com/download/pattern.asp
>>>
>>>
>>
>>Where are these files and what are file names? You mean
>
> you downloaded
>
>>and ran Trend Micro's sysclean in safe mode, and you
>
> turned of system
>
>>restore? What were the results of the scan?
>>_____________________________________________________
>>The folder and file names are...
>
> (1)Folder: C\Documents and Settings\kyker\Local
> Settings\temp
> File: conscorr...ini
> Status: Free memory
> Detected: TR/Dldr.Stubby.C
>
> (2)Folder: C\Documents and Settings\kyker\..\THI10BA.tmp
> File: multimpp.cap...prelnsmm.exe
> Status: Free memory
> Detected: TR/Hijack.mulltiPP
>
> (3)Folder: C\Documents and Settings\kyker\..\THI163A.tmp
> File: multimpp.cap...prelnsmm.exe
> Status: Free memory
> Detected: TR/Hijack.mulltiPP
>
> (4)Folder: C\Documents and Settings\kyker\..\THI22EA.tmp
> File: localNRd.cab...polall1I.exe
> Status: Free memory
> Detected: TR/Dldr.Krepper.3
>
> (5)Folder: C\Documents and Settings\kyker\..\THI6CF0.tmp
> File: multimpp.cap...prelnsmm.exe
> Status: Free memory
> Detected: TR/Hijack.MulltiPP
>
> I did download TM's sysclean and I ran it in safemode
> with system restore off. I rebooted in Normal mode,
> turned system restore back on, and ran AntiVir XP. The
> same 5 files showed up. The results from sysclean showed
> that there were errors for some of the files it couldnt
> get into (like yahoo or aol messenger), but it wasn't any
> of my files above. When sysclean was running I noticed
> if it couldnt clean something it deleted it. Maybe it
> couldn't do either for these? It may be easier to email
> any more suggestions because sometimes my IE shuts down
> before I can get to this page.
> My email is rkyker@yahoo.com. I really appreciate your
> help.
> Rachel
Answered in the newer post.
- Next message: Peter Frank: "Q815411_WXP_SP2_x86_DEU.exe"
- Previous message: Rock: "Re: An internal application error has occured. Help please"
- In reply to: Rachel K: "Re: Attn: Rock"
- Messages sorted by: [ date ] [ thread ]
Relevant Pages
|