|
To: Abnormal re: response to PSEXEC.EXE error
|
Bonnie
martinb@knology.net
08/08/03
|
Hi,
Thanks so much for your response. Housecall found 444 infected files!! Most of them were PE Elkern.D which I cleaned. Should I have deleted them also? There were also 5 or 6 that said they were noncleanable such as Troj glitch.c, adwt tenget.a, pe valla.a, etc. How do I get rid of these and how do I prevent this from happening again? We have norton antivirus but husband was unable to reload when he tried a few days ago. Thanks again for your help. Bonnie
|
Abnormal
08/08/03
|
Hi, Bonnie
All I can offer you are good sites,
with helpful tools.
Try a 30 day trial of Trojan remover.
http://www.simplysup.com/tremover/download.html
For spyware, get Spybot Search and Destroy.
http://tomcoyote.org/SPYBOT/
SpyWare prevention tool.
Spyware blaster.
http://www.javacoolsoftware.com/spywareblaster.html
Spyware help site.
http://www.spywareinfo.com/forums/
Search site for your Norton problems.
http://www.symantec.com/search/
I have more links, will post them when
more time.
Good luck
|
ed
08/09/03
|
Keep norton antivirus updated. Set it up to update automatically. These viruses most probably forwarded themselves to everyone in your adress book.Hopefully we dont have mutual friends. There may be some damage done to your system files. If you know what operating system you have (95,98,98se,xp) post it for instruction re system file checker and/or reformatting.
|
snowman
08/09/03
|
Bonnie:
Try pandas online scan and see if that helps.\
If you have a trojan on your system an online scan is available at www.trojanscan.com
You might also have to use nortons removal tool for w32.KLEZ it also removes elkern The link is
http://securityresponse.symantec.com/avcenter/venc/data/w32.klez.removal.tool.html
|
snowman
08/09/03
|
Bonnie should have added: read Nortons page carefully. You'll have to run the tool from safe mode.
W32.klez carries the elkern virus, that's why it's the same removal tool.
|
Abnormal
08/09/03
|
More tools,
I'm sure that by now everyone has heard about email viruses; most people probably have either experienced one themselves or know someone who has. The latest batch of viruses have become more adept than ever at getting people to execute them unintentionally - that's where AnalogX Script Defender comes in!
AnalogX Script Defender will intercept any request to execute the most common scripting types used in virus attacks, such as Visual Basic Scripting (.VBS), Java Script (.JS), etc and can even be configured to intercept new script extensions as needed! It's very simple to use and helps to ensure that you do not inadvertently run a script no matter what email program you use, or even if you get it via another method.
http://www.analogx.com/contents/download/system/sdefend.htm
StartupMonitor is a small utility that runs transparently (it doesn't even use a tray icon) and notifies you when any program registers itself to run at system startup. It prevents those utterly useless tray applications from registering themselves behind your back, and it acts as a security tool against trojans like BackOrifice or Netbus.
StartupMonitor does not require Startup Control Panel, but it complements it nicely. When you choose not to allow a program to register itself, the program's entry becomes disabled in Startup Control Panel, so you can go back and enable it later if necessary. StartupMonitor watches the Start Menu's Startup folders and the Run entries in the registry.
StartupMonitor has been tested on Windows 98, Windows 98SE, Windows ME, Windows NT 4.0, Windows 2000, and Windows XP; unfortunately, it does not function correctly under Windows 95 because of some unimplemented routines in the operating system.
http://www.mlin.net/StartupMonitor.shtml
|
|
