|
Posted by =?Utf-8?B?S3Jpcw==?= on August 8, 2005, 5:36 am
If you were Registered and logged in, you could reply and use other advanced thread options
A few days ago I started receiving messages saying NAV has found a virus in
c:\windows\temp and there were hundreds of them appearing. I thought it would
get rid of it if I just did a boot in safe mode, full virus scan etc and that
would be it. The problem now is everytime I start my computer everything is
running fine until I start NAV Auto-Protect and thats when all these files
keep appearing in the windows\temp folder. Once this happens, all my other
Anti-Virus programs go mad as if its just appeared out of nowhere but when I
dont load NAV Auto-Protect there are no traces of any viruses whatsoever. The
files that appear in the windows\temp folder have name which are TMP*.TMP
where * can be either a number or number and letters and the number of files
just increase until my disk space runs low. CAN ANYONE PLEASE PLEASE TELL ME
WHAT THIS IS OR WHAT PROGRAM MIGHT BE CAUSING IT??? Thank you
|
|
Posted by David H. Lipman on August 8, 2005, 8:43 am
If you were Registered and logged in, you could reply and use other advanced thread options
| A few days ago I started receiving messages saying NAV has found a virus in
| c:\windows\temp and there were hundreds of them appearing. I thought it would
| get rid of it if I just did a boot in safe mode, full virus scan etc and that
| would be it. The problem now is everytime I start my computer everything is
| running fine until I start NAV Auto-Protect and thats when all these files
| keep appearing in the windows\temp folder. Once this happens, all my other
| Anti-Virus programs go mad as if its just appeared out of nowhere but when I
| dont load NAV Auto-Protect there are no traces of any viruses whatsoever. The
| files that appear in the windows\temp folder have name which are TMP*.TMP
| where * can be either a number or number and letters and the number of files
| just increase until my disk space runs low. CAN ANYONE PLEASE PLEASE TELL ME
| WHAT THIS IS OR WHAT PROGRAM MIGHT BE CAUSING IT??? Thank you
Download MULTI_AV.EXE from the URL --
http://www.ik-cs.com/programs/virtools/Multi_AV.exe
It is a self-extracting ZIP file that contains the Kixtart Script Interpreter {
http://kixtart.org Kixtart is CareWare } three batch files, five Kixtart
scripts, one Link
(.LNK) file, this PDF instruction file and two utilities; UNZIP.EXE and
WGET.EXE. It will
simplify the process of using; Sophos, Trend and McAfee Anti Virus Command Line
Scanners to
remove
viruses and various other malware.
C:\AV-CLS\StartMenu.BAT -- { or Double-click on 'Start Menu' in C:\AV-CLS}
This will bring up the initial menu of choices and should be executed in Normal
Mode. This
way all the components can be downloaded from each AV vendor’s web site.
The choices are; Sophos, Trend, McAfee, Exit the menu and Reboot the PC.
You can choose to go to each menu item and just download the needed files or you
can
download the files and perform a scan in Normal Mode. Once you have downloaded
the files
needed for each scanner you want to use, you should reboot the PC into Safe Mode
[F8 key
during boot] and re-run the menu again and choose which scanner you want to run
in Safe
Mode. It is suggested to run the scanners in both Safe Mode and Normal Mode.
When the menu is displayed hitting 'H' or 'h' will bring up a more comprehensive
PDF help
file.
To use this utility, perform the following...
Execute; Multi_AV.exe { Note: You must use the default folder C:\AV-CLS }
Choose; Unzip
Choose; Close
Execute; C:\AV-CLS\StartMenu.BAT
{ or Double-click on 'Start Menu' in C:\AV-CLS }
NOTE: You may have to disable your software FireWall or allow WGET.EXE to go
through your
FireWall to allow it to download the needed AV vendor related files.
* * * Please report back your results * * *
--
Dave
http://www.claymania.com/removal-trojan-adware.html
http://www.ik-cs.com/got-a-virus.htm
|
|
Posted by =?Utf-8?B?S3Jpcw==?= on August 8, 2005, 2:10 pm
If you were Registered and logged in, you could reply and use other advanced thread options
think whats wrong. The viruses only appear when I enable NAV Auto-Protect.
Until then, all the other Anti-Virus programs show a clean Hard Drive but as
soon as I enable auto-protect they detect trojan.dropper in the form of
c:\windows\temp\tmp*.tmp. There must be a source for the virus but where is
it. I have a registry backup from late july, do you think using this would
help?
|
|
Posted by David H. Lipman on August 9, 2005, 9:17 am
If you were Registered and logged in, you could reply and use other advanced thread options
| Ive tried running that scan and all of them stop after a few minutes. I can't
| think whats wrong. The viruses only appear when I enable NAV Auto-Protect.
| Until then, all the other Anti-Virus programs show a clean Hard Drive but as
| soon as I enable auto-protect they detect trojan.dropper in the form of
| c:\windows\temp\tmp*.tmp. There must be a source for the virus but where is
| it. I have a registry backup from late july, do you think using this would
| help?
No, I don't think it will help.
Please describe exactly what happens when you run the Multi AV scanner tool,
what screens
you ran and what happens and when exactly it fails.
--
Dave
http://www.claymania.com/removal-trojan-adware.html
http://www.ik-cs.com/got-a-virus.htm
|
| Similar Threads | Posted | | Removing Trojan that Hijacks Attempts to Visit Google and Other En | August 7, 2005, 1:40 pm |
| The best way for removing spy ? | February 28, 2006, 2:22 am |
| Removing Newdotnet | November 13, 2005, 7:33 pm |
| Removing virtumundo | July 6, 2006, 2:43 pm |
| need help removing popcorn.net | July 25, 2006, 10:01 pm |
| Need Help Removing A Virus | October 15, 2006, 11:38 am |
| removing NIS 2006 | January 18, 2007, 8:37 am |
| Removing "PCtuneup" spyware? | August 22, 2005, 11:31 pm |
| REQ: Newbie - Help removing AproposMedia | October 7, 2005, 7:23 am |
| Removing Zango spyware | October 25, 2008, 8:30 am |
|
XML site map