[access-uk] Re: Help with a virus please
- From: "kub" <kublia@xxxxxxxxxxxxxxxxx>
- To: <access-uk@xxxxxxxxxxxxx>
- Date: Thu, 2 Nov 2006 01:31:09 -0500
I would download kaspersky antivirus and install it. Pcworld rates it the best
thru lab tests at this time. Second, I would search on google or your favorite
search engine for the name of the trojan and you will find instructions on how
to remove it. You will find teh folders that it resides in and the registry
entries that it uses. I would also run spybot as well. If these things fail I
would uninstall msn messenger. Also, this is what I have found to work but be
aware taht this carries risk so if the machine crashes you may need sighted
help to make it run. I have gone into the windows windows system and windows
system32 folders and organized the files by date created and modified in turn.
I then have deleted the newest files. This serves one the best when done
immediately after you have gotten the virus or trojan because that is of course
when the files were changed or put on the system so there is a great certainty
that these are the files. However, again I want to emphasize that this carries
great risk so only do this if other measures fail and or you have sighted help.
There is always a difference in what a blind person can risk with as opposed
to without sighted help. It has nothing to do with being blind per se but
everything to do with the speech not reading the screen before windows comes up.
kapre
----- Original Message -----
From: Amro Bilal
To: Access-UK
Sent: Wednesday, November 01, 2006 5:52 PM
Subject: [access-uk] Help with a virus please
Hi everyone,
I have a trojan that I can't get rid of. For couple of days, every time I
start my computer NOD32 displays the following message
"Event occurred on a new file created by the application:
C:\WINDOWS\system32\msn.exe. The file was moved to quarantine. You may close
this window."
And I get a NOD32 virus alert message in my inbox that says
"C:\WINDOWS\system32\hook.dll is infected with Win32/Spy.BZub.NBD
trojan."
Despite running, more than once, with system restore turned off, deep scans
with NOD32 and Ad-Aware, my computer is still infected. Ad-aware is still
showing at least one object "MRU List (x) objects".
I don't know what I can do next now, and why NOD32 can't remove what keeps
creating the file that infected with the Win32 virus when my computer starts,
even though during the deep scan it found about three threats and dealt with
them.
I'd very much appreciate any advice on what I can do next to cure my sick
machine as I'm getting sick of this lurking nasty!
Thanks in anticipation,
Amro
Other related posts: