Archived from groups: microsoft.public.windowsxp.security_admin (
More info?)
Thanks for the help but I am a computer novice and I need some help in
understanding all this.
"Norton has a problem in repairing changes made to the OS. It might not have
corrected the Registry. Go back to...
http://securityresponse.symantec.com/avcenter/venc/data/w32.netsky.p@mm.html
And examine your system to see if the alterations have been fixed based upon
the writeup. "
The report is huge, the virus changes many things and I have no idea how to
check any of them.
Once again - All help is greatly appreciated as is any more.
"David H. Lipman" wrote:
> From: "Bill" <Bill@discussions.microsoft.com>
>
> | I got w32netsky.P@mm on my computer yesterday, so I ran Norton AV and it
> | quarantined it. I then deleted it, but I was reading some of the info
> | available on it at the Symantec website and it said something about the
> | Registry being changed by the virus. There is a fix tool on the site, but I
> | didn't use it. Was deleting it the right thing to do? If not, how do I fix
> | the problem?
> |
> | any help would be greatly appreciated.
>
> There are anti virus News Groups specifically for this type of discussion.
>
> microsoft.public.security.virus
> alt.comp.virus
> alt.comp.anti-virus
>
> Norton has a problem in repairing changes made to the OS. It might not have corrected the
> Registry. Go back to...
>
http://securityresponse.symantec.com/avcenter/venc/data/w32.netsky.p@mm.html
>
> And examine your system to see if the alterations have been fixed based upon the writeup.
>
> I also suggest you scan using alternate AV scanners. The following Multi AV scanner
> provides AV scanners for; McAfee, Sophos and Trend Micro.
>
>
> Download MULTI_AV.EXE from the URL --
>
http://www.ik-cs.com/programs/virtools/Multi_AV.exe
>
> It is a self-extracting ZIP file that contains the Kixtart Script Interpreter {
>
http://kixtart.org Kixtart is CareWare } three batch files, five Kixtart scripts, one Link
> (.LNK) file, a PDF instruction file and two utilities; UNZIP.EXE and WGET.EXE. It will
> simplify the process of using; Sophos, Trend and McAfee Anti Virus Command Line Scanners to
> remove viruses, Trojans and various other malware.
>
> C:\AV-CLS\StartMenu.BAT -- { or Double-click on 'Start Menu' in C:\AV-CLS}
> This will bring up the initial menu of choices and should be executed in Normal Mode. This
> way all the components can be downloaded from each AV vendor’s web site.
> The choices are; Sophos, Trend, McAfee, Exit the menu and Reboot the PC.
>
> You can choose to go to each menu item and just download the needed files or you can
> download the files and perform a scan in Normal Mode. Once you have downloaded the files
> needed for each scanner you want to use, you should reboot the PC into Safe Mode [F8 key
> during boot] and re-run the menu again and choose which scanner you want to run in Safe
> Mode. It is suggested to run the scanners in both Safe Mode and Normal Mode.
>
> When the menu is displayed hitting 'H' or 'h' will bring up a more comprehensive PDF help
> file.
>
> To use this utility, perform the following...
> Execute; Multi_AV.exe { Note: You must use the default folder C:\AV-CLS }
> Choose; Unzip
> Choose; Close
>
> Execute; C:\AV-CLS\StartMenu.BAT
> { or Double-click on 'Start Menu' in C:\AV-CLS }
>
> NOTE: You may have to disable your software FireWall or allow WGET.EXE to go through your
> FireWall to allow it to download the needed AV vendor related files.
>
> * * * Please report back your results * * *
>
>
>
>
> --
> Dave
>
http://www.claymania.com/removal-trojan-adware.html
>
http://www.ik-cs.com/got-a-virus.htm
>
>
>