Re: Can't remove Partition table{MBR} virus NYB

On Sat, 03 Sep 2005 23:10:29 -0400, Joe K wrote:

> Malke wrote:
>> Joe K wrote:
>>
>>
>>>Joe K wrote:
>>>
>>>>I am using XP Home SP1. I am fixing someone computer.They had many
>>>>other viruses which were removed. I ran an anti spyware and ad ware
>>>>removal. They found many problems and removed them.The avg anti virus
>>>>found this
>>>>virus[Partition table{MBR} virus NYB] and it can't remove it. How do
>>>>I remove it?
>>>>I will search the internet in the meantime. I can't spend too much
>>>>time on this.
>>>
>>>to add I have another virus \trogen downloader sysupd.dll in a folder
>>>called c:\windows\ISRVS. Inside this folder are files called
>>>desktop.exe,ffsearch.exe,edmond.exe,isearch.xpi,msdbhk.dll,mfiltis.dll
>>>and icons folder and sysupd.dll.
>>>Even with admin rights I cannot delete folder or files.I tried to
>>>remove read only attributes but this didn't work.
>>>The error is "error deleting file or folder Cannot delete
>>>sysupd:access is denied Make sure the disk is not full or write
>>>protected and that the file is not currently in use"
>>
>>
>> You need to do all malware removal work in Safe Mode. You should be able
>> to remove sysupd.dll and its evil brothers there. Here are malware
>> removal steps:
>>
>> http://www.elephantboycomputers.com/page2.html#Removing_Malware
>>
>> Apparently Avast! AV will disinfect the NYB virus since it can clean the
>> boot sector.
>>
>> Malke
> Thanks I am in the process of using the 6 boot up disks to repair HOME
> because I can't connect to internet with IE. I think removing spyware
> screwed up my connectivity some how.
> I checked all the usual spots for connections,internet options,network
> connection,My firewall gave IE and svchost.exe access.
>
> I will follow your link soon. Thanks again.Also I was using my 100M zip
> to install these programs. Even if I had a connection I don't like to
> access the internet on an unknown computer. This computer had all sorts
> of viruses and spyware.adware.The worst I have ever cleaned to date.

Be sure you write protect those 6 disk, 11 or 12 years ago that's how NYB
moved around, via floppies.

.

Relevant Pages

  • Re: Trojan.Tooso.B Patch
    ... Malke Wrote: ... > scanning engine and the virus pattern files. ... Create a new folder on your Desktop or the C: ...
    (microsoft.public.security.virus)
  • newfolder.exe containment procedure
    ... File Size equals 208Kb, uses a folder Icon the same name as parent folder, ... Ensure you set the PC to show hidden and system files and file extensions. ... That is the entry that starts the bug. ... delete the dormant virus files. ...
    (microsoft.public.security.virus)
  • RE: newfolder.exe containment procedure
    ... but what is it upto in the background? ... File Size equals 208Kb, uses a folder Icon the same name as parent folder, ... Ensure you set the PC to show hidden and system files and file extensions. ... delete the dormant virus files. ...
    (microsoft.public.security.virus)
  • Re: NEED HELP w/ virus
    ... Select the Tools menu and click Folder ... DON'T WORRY ABOUT THE WARNING POP UP WINDOW THIS IS NORMAL, ... Now its time to start your computer in Safe Mode ... Now use your Anti - Virus Program and run it and see what it finds ...If ...
    (microsoft.public.security.virus)
  • Re: Admin rights gone - Help needed fast
    ... Information folder. ... Per user Group Policy Restrictions for XP Home and XP Pro ... How do I fix my Adobe CS and other programs? ... Virus scan found nothing, and spyware scan removed some tracking ...
    (microsoft.public.windowsxp.security_admin)