Worm Rontok

Worm Rontok

Secure Home | Search | About
 Microsoft Antivirus Discussions    Post an article   get this group's latest topics as an RSS feed add this group's latest topics to your My MSN content add this group's latest topics to your My Yahoo content add this group's latest topics to your Google content
Subject Author Date
Worm Rontok heather 04-20-2006
`--> Re: Worm Rontok David H. Lipman04-21-2006
Posted by =?Utf-8?B?aGVhdGhlcg==?= on April 20, 2006, 10:35 pm
If you were  Registered and logged in, you could reply and use other advanced thread options
Help!
I went away and my family infected my PC with this horrible worm. It has
disabled regedit, task manager etc. I cannot run Norton. I am trying now to
run something called Sysclean; but it doesnt seem to be working either. Also,
it stops access to websites where you can run a virus scan - any search term
that has virus, worm etc. HELP!!! Any links to pages to that I can download
helpful tools (though see above) would be very much appreciated
thanks in advance
PS - I can only access the net through the infected computer; and am a sort
of newbie, so not too technical please.

Posted by Malke on April 20, 2006, 10:42 pm
If you were  Registered and logged in, you could reply and use other advanced thread options
heather wrote:

> Help!
> I went away and my family infected my PC with this horrible worm. It
> has disabled regedit, task manager etc. I cannot run Norton. I am
> trying now to run something called Sysclean; but it doesnt seem to be
> working either. Also, it stops access to websites where you can run a
> virus scan - any search term that has virus, worm etc. HELP!!! Any
> links to pages to that I can download helpful tools (though see above)
> would be very much appreciated thanks in advance
> PS - I can only access the net through the infected computer; and am a
> sort of newbie, so not too technical please.

If you are having trouble running Sysclean and only have the one
computer available and are a computer newbie, the very best thing for
you to do would be to take the machine to a professional computer
repair shop (not your local version of BigStoreUSA). It will be
complicated to clean the machine yourself. I'm not saying this to hurt
your feelings, just being practical.

Normally we suggest that you do the preparatory work listed here:
http://www.elephantboycomputers.com/page2.html#Removing_Malware

and then run either Sysclean or David Lipman's Multi_AV per:

http://www.elephantboycomputers.com/page2.html#TrendMicros_Sysclean
http://www.ik-cs.com/multi-av.htm - how to use Dave Lipman's Multi-AV
http://pcdid.com/Multi_AV.htm - additional Multi_AV instructions
http://www.ik-cs.com/programs/virtools/Multi_AV.exe - Multi-AV download

Then go through the rest of the malware removal steps, including running
Ewido.

If you can't get to the Internet or antivirus sites, look at your hosts
file and see what is being blocked.

Information about the Hosts file -
http://www.mvps.org/winhelp2002/hosts.htm

I'm afraid there is no easy answer or silver bullet. You know your skill
level the best, but I won't pretend to you that it will be an easy job
for you to clean this machine unless you know what you're doing.

Malke
--
Elephant Boy Computers
www.elephantboycomputers.com
"Don't Panic!"
MS-MVP Windows - Shell/User

Posted by =?Utf-8?B?aGVhdGhlcg==?= on April 20, 2006, 11:16 pm
If you were  Registered and logged in, you could reply and use other advanced thread options
Thanks Malke
I've managed to run Sysclean; so hopefully that will improve matters
somewhat. If not....I'll take your other suggestion and take my PC into the
store (I would just reformat and re-install, but the graphics card is playing
up too, so I may as well get it all fixed at once.)
I'll post a reply if I manage to get rid of the worm
cheers
Heather

"Malke" wrote:

> heather wrote:
>
> > Help!
> > I went away and my family infected my PC with this horrible worm. It
> > has disabled regedit, task manager etc. I cannot run Norton. I am
> > trying now to run something called Sysclean; but it doesnt seem to be
> > working either. Also, it stops access to websites where you can run a
> > virus scan - any search term that has virus, worm etc. HELP!!! Any
> > links to pages to that I can download helpful tools (though see above)
> > would be very much appreciated thanks in advance
> > PS - I can only access the net through the infected computer; and am a
> > sort of newbie, so not too technical please.
>
> If you are having trouble running Sysclean and only have the one
> computer available and are a computer newbie, the very best thing for
> you to do would be to take the machine to a professional computer
> repair shop (not your local version of BigStoreUSA). It will be
> complicated to clean the machine yourself. I'm not saying this to hurt
> your feelings, just being practical.
>
> Normally we suggest that you do the preparatory work listed here:
> http://www.elephantboycomputers.com/page2.html#Removing_Malware
>
> and then run either Sysclean or David Lipman's Multi_AV per:
>
> http://www.elephantboycomputers.com/page2.html#TrendMicros_Sysclean
> http://www.ik-cs.com/multi-av.htm - how to use Dave Lipman's Multi-AV
> http://pcdid.com/Multi_AV.htm - additional Multi_AV instructions
> http://www.ik-cs.com/programs/virtools/Multi_AV.exe - Multi-AV download
>
> Then go through the rest of the malware removal steps, including running
> Ewido.
>
> If you can't get to the Internet or antivirus sites, look at your hosts
> file and see what is being blocked.
>
> Information about the Hosts file -
> http://www.mvps.org/winhelp2002/hosts.htm
>
> I'm afraid there is no easy answer or silver bullet. You know your skill
> level the best, but I won't pretend to you that it will be an easy job
> for you to clean this machine unless you know what you're doing.
>
> Malke
> --
> Elephant Boy Computers
> www.elephantboycomputers.com
> "Don't Panic!"
> MS-MVP Windows - Shell/User
>

Posted by =?Utf-8?B?UGFuZGFfbWFu?= on April 20, 2006, 11:56 pm
If you were  Registered and logged in, you could reply and use other advanced thread options
My reply is at the bottom of your message :

"heather" wrote:

> Thanks Malke
> I've managed to run Sysclean; so hopefully that will improve matters
> somewhat. If not....I'll take your other suggestion and take my PC into the
> store (I would just reformat and re-install, but the graphics card is playing
> up too, so I may as well get it all fixed at once.)
> I'll post a reply if I manage to get rid of the worm
> cheers
> Heather
>


When you clean your computer , it is essential,I believe,to learn how to
protect it well so this ^nightmare^ will never come back again. I think that
viruses' best friend is the user and I think this is proved in your case
because your computer was infected by a member of your family. This link will
shows you why we should stay protected and how can we protect our computers
.Also I have written a "Parental Control" section which is really useful for
you. Be an administrator and create limited user accounts for your family .

http://pandaman.my.contact.bg
"Protect your PC" section

Regards!

Panda_man
--
Bronze level Contributor , MS-Newsgroups
Prevention is always better than cure !
http://pandaman.my.contact.bg
Please , rate posts

Posted by David H. Lipman on April 21, 2006, 5:48 pm
If you were  Registered and logged in, you could reply and use other advanced thread options

| Help!
| I went away and my family infected my PC with this horrible worm. It has
| disabled regedit, task manager etc. I cannot run Norton. I am trying now to
| run something called Sysclean; but it doesnt seem to be working either. Also,
| it stops access to websites where you can run a virus scan - any search term
| that has virus, worm etc. HELP!!! Any links to pages to that I can download
| helpful tools (though see above) would be very much appreciated
| thanks in advance
| PS - I can only access the net through the infected computer; and am a sort
| of newbie, so not too technical please.


Download MULTI_AV.EXE from the URL --
http://www.ik-cs.com/programs/virtools/Multi_AV.exe

To use this utility, perform the following...
Execute; Multi_AV.exe { Note: You must use the default folder C:\AV-CLS }
Choose; Unzip
Choose; Close

Execute; C:\AV-CLS\StartMenu.BAT
{ or Double-click on 'Start Menu' in C:\AV-CLS }

NOTE: You may have to disable your software FireWall or allow WGET.EXE to go
through your
FireWall to allow it to download the needed AV vendor related files.

C:\AV-CLS\StartMenu.BAT -- { or Double-click on 'Start Menu' in C:\AV-CLS}
This will bring up the initial menu of choices and should be executed in Normal
Mode.
This way all the components can be downloaded from each AV vendor's web site.
The choices are; Sophos, Trend, McAfee, Kaspersky, Exit this menu and Reboot the
PC.

You can choose to go to each menu item and just download the needed files or you
can
download the files and perform a scan in Normal Mode. Once you have downloaded
the files
needed for each scanner you want to use, you should reboot the PC into Safe Mode
[F8 key
during boot] and re-run the menu again and choose which scanner you want to run
in Safe
Mode. It is suggested to run the scanners in both Safe Mode and Normal Mode.

When the menu is displayed hitting 'H' or 'h' will bring up a more comprehensive
PDF help
file. http://www.ik-cs.com/multi-av.htm

Additional Instructions:
http://pcdid.com/Multi_AV.htm


* * * Please report back your results * * *


--
Dave
http://www.claymania.com/removal-trojan-adware.html
http://www.ik-cs.com/got-a-virus.htm



Similar ThreadsPosted
Worm VB.AS Aliases W32.Alcra.B and W32/Alcan.worm!p2p July 18, 2005, 8:37 am
WORM/DELF.FPV - new worm?? January 14, 2008, 6:58 am
new worm? June 20, 2006, 5:09 am
new worm i think November 22, 2006, 6:15 pm
RE NEW WORM November 23, 2006, 5:24 pm
Worm? November 11, 2008, 1:17 pm
Virus/worm? October 25, 2005, 2:29 am
Virus-Worm April 6, 2006, 5:43 pm
W32.Sinnaka.A@mm worm May 2, 2006, 12:36 am
W32.Swen.A@mm worm May 4, 2006, 12:21 am

The site map in XML format XML site map

Contact Us | Privacy Policy