|
Posted by AVallejo on March 4, 2006, 8:53 pm
If you were Registered and logged in, you could reply and use other advanced thread options
Thanks,I'll follow your sugestion and post back when I have results.
Thanks,
André
>
> | I did send it to Avast and a couple of other companys about 3 days
> ago,but
> | no answers so far... I was thinking about a false positive,but what
> convince
> | me it's real is the fact that a new copy appears in my temp directory as
> | soon as I delete the current one.Always a .tmp file,with a sequential
> numer
> | or letter,or a mix,like .e1.tmp,then E2.tmp,or F1.tmp,like that. Really
> | driving me nuts.And considering it's a banker,it's nonsense not to be
> | sure...
> | Any ideas? Already used ewido to,which found other 2 virus,but not this
> | one...
> |
>
> Well you can use my Multi AV Scanning Tool which provides four different
> AV scanners.
> Information posted below.
>
> You can also supply a sample to McAfee/AVERT via the webImmune web page
> https://www.webimmune.net/default.asp
>
> You will have to register with the site. However, if they finsd the
> sample(s) to be
> malicious they will provide you with a EXTRA.DAT which can be used
> inconjunction with the
> McAfee module of the Multi AV Scanning Tool.
>
> If McAfee creates an EXTRA.DAT file for you, just update this thread and
> I'll provide
> instructions on how to use it with the Multi AV Scanning Tool.
>
> --
>
> Download MULTI_AV.EXE from the URL --
> http://www.ik-cs.com/programs/virtools/Multi_AV.exe
>
> To use this utility, perform the following...
> Execute; Multi_AV.exe { Note: You must use the default folder C:\AV-CLS }
> Choose; Unzip
> Choose; Close
>
> Execute; C:\AV-CLS\StartMenu.BAT
> { or Double-click on 'Start Menu' in C:\AV-CLS }
>
> NOTE: You may have to disable your software FireWall or allow WGET.EXE to
> go through your
> FireWall to allow it to download the needed AV vendor related files.
>
> C:\AV-CLS\StartMenu.BAT -- { or Double-click on 'Start Menu' in C:\AV-CLS}
> This will bring up the initial menu of choices and should be executed in
> Normal Mode.
> This way all the components can be downloaded from each AV vendor's web
> site.
> The choices are; Sophos, Trend, McAfee, Kaspersky, Exit this menu and
> Reboot the PC.
>
> You can choose to go to each menu item and just download the needed files
> or you can
> download the files and perform a scan in Normal Mode. Once you have
> downloaded the files
> needed for each scanner you want to use, you should reboot the PC into
> Safe Mode [F8 key
> during boot] and re-run the menu again and choose which scanner you want
> to run in Safe
> Mode. It is suggested to run the scanners in both Safe Mode and Normal
> Mode.
>
> When the menu is displayed hitting 'H' or 'h' will bring up a more
> comprehensive PDF help
> file. http://www.ik-cs.com/multi-av.htm
>
> Additional Instructions:
>
http://harrisonrj.home.comcast.net/step_by_step_pc_cleaning_process.htm#Step_3_%96_Getting_Help
>
>
> * * * Please report back your results * * *
>
>
>
> --
> Dave
> http://www.claymania.com/removal-trojan-adware.html
> http://www.ik-cs.com/got-a-virus.htm
>
>
| 
XML site map