|
Posted by =?Utf-8?B?QmlqYW4gS2lhbmlmYXJk on March 22, 2007, 7:05 am
If you were Registered and logged in, you could reply and use other advanced thread options
environment without need to user interaction?
I mean, can I run it as a scriprt without user interference?
"David H. Lipman" wrote:
>
> | Hi,
>
> | Although we have symantec antivirus corporate version (10.0.2.20020)
> | installed and updated on all servers and workstationSince yesterday a virus,
> | worm or spyware spreaded on the corporate network. It's behavior is as
> | following:
>
> | 1. It hides a folder.
> | 2. Then copy itself with name of hidden folder.
> | 3. It also checks "hide extention for known file types" and "hide protected
> | operating system files(recommended)" in the folder options.
> | For example if the folder name "ABC" it hide it then copy itself in the same
> | path as "ABC.exe".
> | Unfortunately symantec does not detect it.
>
> | How can I remove this virus?
> | Can anybody help me?
>
> | By the way, here we have have windows XP SP2 and windows 2K3 server.
>
>
> Download MULTI_AV.EXE from the URL --
> http://www.ik-cs.com/programs/virtools/Multi_AV.exe
>
> To use this utility, perform the following...
> Execute; Multi_AV.exe { Note: You must use the default folder C:\AV-CLS }
> Choose; Unzip
> Choose; Close
>
> Execute; C:\AV-CLS\StartMenu.BAT
> { or Double-click on 'Start Menu' in C:\AV-CLS }
>
> NOTE: You may have to disable your software FireWall or allow WGET.EXE to go
through your
> FireWall to allow it to download the needed AV vendor related files.
>
> C:\AV-CLS\StartMenu.BAT -- { or Double-click on 'Start Menu' in C:\AV-CLS}
> This will bring up the initial menu of choices and should be executed in
Normal Mode.
> This way all the components can be downloaded from each AV vendor's web site.
> The choices are; Sophos, Trend, McAfee, Kaspersky, Exit this menu and Reboot
the PC.
>
> You can choose to go to each menu item and just download the needed files or
you can
> download the files and perform a scan in Normal Mode. Once you have downloaded
the files
> needed for each scanner you want to use, you should reboot the PC into Safe
Mode [F8 key
> during boot] and re-run the menu again and choose which scanner you want to
run in Safe
> Mode. It is suggested to run the scanners in both Safe Mode and Normal Mode.
>
> When the menu is displayed hitting 'H' or 'h' will bring up a more
comprehensive PDF help
> file. http://www.ik-cs.com/multi-av.htm
>
> Additional Instructions:
> http://pcdid.com/Multi_AV.htm
>
>
> * * * Please report back your results * * *
>
>
> --
> Dave
> http://www.claymania.com/removal-trojan-adware.html
>
>
>
| 
XML site map