Virus disabling machines completely

Virus disabling machines completely

Secure Home | Search | About
 Microsoft Antivirus Discussions    Post an article   get this group's latest topics as an RSS feed add this group's latest topics to your My MSN content add this group's latest topics to your My Yahoo content add this group's latest topics to your Google content
Subject Author Date
Virus disabling machines completely =?Utf-8?B?Zm5qZW5nYQ==?= 05-31-2007
Posted by =?Utf-8?B?Zm5qZW5nYQ==?= on May 31, 2007, 3:18 am
If you were  Registered and logged in, you could reply and use other advanced thread options
My machines are being infected by a virus that Norton is prompting an alert
as Rontokbro@mm. This is creating a folder within each folder as the parent
folder and adding a tag-Microsoft. soon the desktop disapears and
Taskmanager, Run, Cmd and running virus scan is disabled. this is happenning
in both normal and safe mode. Is there a way of getting rid of this? I have
formattted several machines and tried several antivirus- Mcafee, AVG and
Panda all of which are fully updated but this virus is still killing may
machines. Any help. Its frustyrating
--
frank

Posted by Richard Urban on May 31, 2007, 4:00 am
If you were  Registered and logged in, you could reply and use other advanced thread options
http://www.symantec.com/security_response/writeup.jsp?docid=2005-092311-2608-99&tabid=3

--


Regards,

Richard Urban
Microsoft MVP Windows Shell/User
(For email, remove the obvious from my address)

Quote from George Ankner:
If you knew as much as you think you know,
You would realize that you don't know what you thought you knew!

> My machines are being infected by a virus that Norton is prompting an
> alert
> as Rontokbro@mm. This is creating a folder within each folder as the
> parent
> folder and adding a tag-Microsoft. soon the desktop disapears and
> Taskmanager, Run, Cmd and running virus scan is disabled. this is
> happenning
> in both normal and safe mode. Is there a way of getting rid of this? I
> have
> formattted several machines and tried several antivirus- Mcafee, AVG and
> Panda all of which are fully updated but this virus is still killing may
> machines. Any help. Its frustyrating
> --
> frank


Posted by =?Utf-8?B?Zm5qZW5nYQ==?= on May 31, 2007, 7:09 am
If you were  Registered and logged in, you could reply and use other advanced thread options
thanks
the machine does not allow regedit both in safemode and normal mode. no
ap[plication can run and the registry reset tool provided is not helping
also. is there any patch from microsoft?
--
frank


"Richard Urban" wrote:

>
http://www.symantec.com/security_response/writeup.jsp?docid=2005-092311-2608-99&tabid=3
>
> --
>
>
> Regards,
>
> Richard Urban
> Microsoft MVP Windows Shell/User
> (For email, remove the obvious from my address)
>
> Quote from George Ankner:
> If you knew as much as you think you know,
> You would realize that you don't know what you thought you knew!
>
> > My machines are being infected by a virus that Norton is prompting an
> > alert
> > as Rontokbro@mm. This is creating a folder within each folder as the
> > parent
> > folder and adding a tag-Microsoft. soon the desktop disapears and
> > Taskmanager, Run, Cmd and running virus scan is disabled. this is
> > happenning
> > in both normal and safe mode. Is there a way of getting rid of this? I
> > have
> > formattted several machines and tried several antivirus- Mcafee, AVG and
> > Panda all of which are fully updated but this virus is still killing may
> > machines. Any help. Its frustyrating
> > --
> > frank
>
>

Posted by =?Utf-8?B?TmV3ZWxsIFdoaXRl?= on May 31, 2007, 8:58 am
If you were  Registered and logged in, you could reply and use other advanced thread options
Try copying regedit.exe to another directory, renaming it, moving it back to
original directory, and see if you can run that to save copy of registry and
then make changes suggested by Symantec.
--
Newell White


"fnjenga" wrote:

> thanks
> the machine does not allow regedit both in safemode and normal mode. no
> ap[plication can run and the registry reset tool provided is not helping
> also. is there any patch from microsoft?
> --
> frank
>
>
> "Richard Urban" wrote:
>
> >
http://www.symantec.com/security_response/writeup.jsp?docid=2005-092311-2608-99&tabid=3
> >
> > --
> >
> >
> > Regards,
> >
> > Richard Urban
> > Microsoft MVP Windows Shell/User
> > (For email, remove the obvious from my address)
> >
> > Quote from George Ankner:
> > If you knew as much as you think you know,
> > You would realize that you don't know what you thought you knew!
> >
> > > My machines are being infected by a virus that Norton is prompting an
> > > alert
> > > as Rontokbro@mm. This is creating a folder within each folder as the
> > > parent
> > > folder and adding a tag-Microsoft. soon the desktop disapears and
> > > Taskmanager, Run, Cmd and running virus scan is disabled. this is
> > > happenning
> > > in both normal and safe mode. Is there a way of getting rid of this? I
> > > have
> > > formattted several machines and tried several antivirus- Mcafee, AVG and
> > > Panda all of which are fully updated but this virus is still killing may
> > > machines. Any help. Its frustyrating
> > > --
> > > frank
> >
> >

Posted by jen on May 31, 2007, 2:15 pm
If you were  Registered and logged in, you could reply and use other advanced thread options
At this point, it can't hurt to try this tool as well(Brontok is an
alias for Rontokbro):
Resolve is the name for a set of small, downloadable Sophos utilities
designed to remove and undo the changes made by certain viruses, Trojans
and worms. They terminate any virus processes and reset any registry
keys that the virus changed. Existing infections can be cleaned up
quickly and easily, both on individual workstations and over networks
with large numbers of computers.
http://www.sophos.com/support/disinfection/brontok.html

> thanks
> the machine does not allow regedit both in safemode and normal mode.
> no
> ap[plication can run and the registry reset tool provided is not
> helping
> also. is there any patch from microsoft?
> --
> frank
>
>
> "Richard Urban" wrote:
>
>>
http://www.symantec.com/security_response/writeup.jsp?docid=2005-092311-2608-99&tabid=3
>>
>> --
>>
>>
>> Regards,
>>
>> Richard Urban
>> Microsoft MVP Windows Shell/User
>> (For email, remove the obvious from my address)
>>
>> Quote from George Ankner:
>> If you knew as much as you think you know,
>> You would realize that you don't know what you thought you knew!
>>
>> > My machines are being infected by a virus that Norton is prompting
>> > an
>> > alert
>> > as Rontokbro@mm. This is creating a folder within each folder as
>> > the
>> > parent
>> > folder and adding a tag-Microsoft. soon the desktop disapears and
>> > Taskmanager, Run, Cmd and running virus scan is disabled. this is
>> > happenning
>> > in both normal and safe mode. Is there a way of getting rid of
>> > this? I
>> > have
>> > formattted several machines and tried several antivirus- Mcafee,
>> > AVG and
>> > Panda all of which are fully updated but this virus is still
>> > killing may
>> > machines. Any help. Its frustyrating
>> > --
>> > frank
>>
>>



Similar ThreadsPosted
Disabling AV Software - OK? November 13, 2005, 9:52 am
How to completely remove Symantec Antivirus Corporate edition September 28, 2007, 2:57 am
Windows Defender problems after Port 135 and rpc disabling! Dr Lipman and others - help! April 9, 2006, 5:45 pm
Need for firewall when machines are behind a NAT router ? December 1, 2005, 1:40 am
Stop Error 0x8e Mult. Machines July 11, 2005, 9:31 pm
Antivirus/Anti-spyware for Windows machines November 8, 2007, 3:18 pm
HELP: Virus is preventing me from installing anti virus software!! January 11, 2007, 2:17 am
I have a virus that uses "anti virus software" downloads as a cover up March 24, 2007, 1:40 pm
I have a worm or virus that does not allow me to go to ANY anti-virus website January 28, 2006, 10:29 pm
Caught a Virus: Virus:Trj/Shutdown.Z -- need advice June 13, 2007, 12:59 am

The site map in XML format XML site map

Contact Us | Privacy Policy