Re: Trojan Downloader - Clean, But One Last Task

From: wayne (nowhere_at_example.com)
Date: 05/13/04 

Date: Thu, 13 May 2004 12:18:14 GMT

are you making sure you are saving it with no extension?

Also reset the permissions so that there is only read only permissions for
any user and inherit permissions removed.

You can always change the permissions if you need to but it should stop any
other program from changing the file!

Wayne

"XP User 0000" <anonymous@discussions.microsoft.com> wrote in message
news:4EDAE42D-AA4F-4C08-AFFF-09F5DB753A41@microsoft.com...
> Hi Rich:
>
> I'm just responding to your very helpful links posted in response to my
question about the Windows XP Spy Ware Nuker virus. The article you linked
me to told me everything I needed to know to finally rid my system of this
NASTY and time-consuming pest.
>
> I have one last task to rid myself of it and that is in regard to the
HOSTS files on my computer. My local host is redirected with a different
address to this Spy Ware advertisement. I've attempted to open the HOSTS
file in Windows\System32 and Drivers\etc to delete the redirect. I turned
Read-Only off and then deleted and saved the file making sure to leave in
the original local host address.
>
> To no luck. For some reason beyond me, when I go to open those files
again to check and see if the change took, I notice that it didn't. What do
I have to do to make a change to the HOSTS file and ensure it sticks?
>
> Anyone's help is very much appreciated. Thanks for taking the time to
provide those links and end a big headache, Rich.

Relevant Pages

  • Networking Problem cont.
    ... Directory permissions of /etc are 755. ... Using this command (which is how the postgres manual ... The contents of the hosts, ... Mail has the best spam protection around ...
    (SunManagers)
  • Re: Can not ping localhost -- all looks correct...
    ... > ping: unknown host localhost ... What are permissions to /etc/host.conf ... Make sure that /etc/nsswitch.conf has a line referring to hosts: ...
    (comp.os.linux.networking)
  • Re: Security settings
    ... is this proof that the hosts FP ... the FP permissions, ... >> Paul M ... >> access to your database, ...
    (microsoft.public.frontpage.client)
  • Re: access permission to ping.exe
    ... > - hosts a page through IIS say, ... > Looks like in windows XP access permissions for % ...
    (microsoft.public.windowsxp.security_admin)
  • Re: file sharing violation. Which permission should I give to the directory and files?
    ... Also what if several people are uisng this page roughly at the same time. ... Dim fname As String = Server.MapPath ... I redirect stdout and stderr of test.exe to two files. ... It looks like the program does not have permissions to write to ...
    (microsoft.public.dotnet.framework.aspnet)