Someone Check For Virus For Me

[Donald]

Hi From Fort Worth !

Well guys , here is what I did. I have CompuServe as my ISP. I saw a 'Free Downloads', link there. Hey , I like to look into this, I mean 'free' . In the link from CompuServe brought up a search list of URL's with the title 'Free Downloads' , so I clicked on one of them. On their page it had a list of programs. There it listed ' Threat Scanner ! ' -Anti-virus. So , I downloaded the program. Now , it downloads super fast 29 k , or there abbots. Well I didn't install it. My problem , is there a virus on it. Something happened to me that I have never happened to me. Now , I don't know much about virus and all that. The only thing I know to do, is run AVG ever now and then (i check for updates every day). Anyway , back to my to my story. When the program was loaded (NOT INSTALLED) , up on the screen a little box popped up from AVG that said Trojan and all that. Well , I was running my AVG in the background. I just started it about 10 minutes ago. Is what I want to know , is was that Trojan thing from the download, or , my AVG just finding the thing ?. Should it be the download , then we have to someway warn others about it and I don't know what to do. If it is my AVG just finding the thing , then it should heal the thing. Below is the URL. The program is 'Threat Scanner'. Like I say , it downloads in seconds , so you wont have to wait. NOTE: I would think that only someone who knows about viruses check this thing out.-- I will come back to the post real often to see if there is a reply and what action to take.------------'May The Force Be With You '----------------------Don


http://www.stop-sign.com/index2.php?n=google_down7&pg=%26dlp_ban226%26ss_dc001&ver=online&rfx=http%3A%2F%2Fwebsearch.cs.com%2Fcs%2Fsponsored%3Fquery%3DFree%2BDownloads%26fromPage%3Dpcblocksl page&SV=c226-a3r&mw_install=scn

[Donald]

It's Me Don
Like I told you , I was running . I just checked and it had ran 10 gigs already and it is still running. What it said so far ---Number of Files Infected : 4 Last Virus Found : Downloader.Wren. I guess when AVG is through it will get rid of it. This is my frist time for something like this to happen to me. When AVG is threw, I will report back to see what it s

[Donald]

Here is my virus pop up box that I copied to you

TEST FINISHED
Test Statistics >
Test Run: manual at 02:51
Files Tested: 72450
Time Elapsed: 90 min.

Infected Files Detected : 4
Viruses Removed By Healing: 2
Files Removed To VIRUS VALT : 0
Viruses Still On The Drive : 2

Ok , why in the world did it leave 2 on disk ! !. What's the deal ?. Should I find a way to remove these two off my disk. The MAIN thing Guys , are these two left on my disk still active ?Maybe I should go and download a new anti-virus program . ---feed back- ----Don

P.S.: Man , I didn't expect to spend all the night on this problem on my computer. It is late . Almost 4:00AM . I'm ready to go to bed and will be back late Sunday afternoon. A lot around the house to do tomorrow.

[oddjob]

Reboot into "Safe Mode with networking" and try your virus scan again. You can also try an online scan from Trendmicro (or do both at the same time, if you'd like). You can leave it running, you don't have to babysit your comp in the meantime.

http://housecall.trendmicro.com/

[jmatt]

See if you can tell us what the virii are , or you may even be able to remove with 1 of these .

Run a virus check from 1 or all of these .
Online Virus check ( free )
http://housecall.antivirus.com/
http://www.coledata.com/virusalert.htm
http://www.cybertechhelp.com/html/misc/av.php
http://www.pandasoftware.es/activescan/activescan-com.asp
http://www.ravantivirus.com/scan/
http://www.bitdefender.com/
http://www.stop-sign.com/

[MartinFitzpatrick]

jmatt

I thought I would test one of those sites you mentioned. I have Norton Antivirus 2003 installed with the latest updates. Trend's online checker found Agrobot.fx on my system. How come Norton did not find it. Weird!

[Pentium-ant]

To Donald

If you are using Windows XP try deleting system restore because antivirus program can not access that folder so they can not remove the virus just tell you it is there. To do this right click on my computer click the system restore tab tick the box that says turn of system restore then click apply. Restart your pc run a full virus scan to make sure all the virus’s were removed then go back to the system restore tab and switch system restore back on.

Hope that helps

[Mac Medic]

ummm, try running hijackthis

and take a look at this thread

http://www.experts-exchange.com/Applications/Viruses/Q_20764041.html

apparently you can use hijackthis to fix the stop-sign_scn.cab files

[Donald]

Hi Gang !
I just now read all your replys.I stopped and just wanted you to know I did check back. I have to run. A ton of things to do here at the house and errands before Sunday runs out. It is 6:30 PM Central. I will be back at about !:00 PM tonight on the computer for a little over 3 hours. The first thing tonight after checking my e-mail is to work on the things you guys said. I want to report that my computer is working just great with no problems m so no virus got it.---O- on the suggestion to disable system restore it says that if I check the box to disable SR for a while , That I will lose ALL restore points . I will have to think about that.- Thanks for ALL the replies and tonight as I said I will get down to it.------------------Don

[jmatt]

Info about System Restore & virii , here .

http://www.augustana.ab.ca/other/cns/virus/

[jmatt]

More here .

http://www.adamtj.org/repository/howto/W32.Blaster.Worm/

[Donald]

Greetings For Tuesday ,

Well , well ,-- I have read all the e-mails. I am going to try out various Anti-virus programs. This will take a while as I found out last night. The one I am trying is one that read pretty good as I was downloading it . The program is " Sophos " . Man , it took me almost 3 hours to download it !. I have dial up-56 kps , but , I looked and it showed it was downloading at 33 kps !. I did run it today and it caught a virus " Moloch ". It did get rid of it and the files that were infected. I am saving to disk all of your good posts. So many good tips and links you sent , especially about " System Restore". It will take a little time to evaluate the Anti-virus links in some of the posts and I will. One of my problems with the scans , is that the ones I 've tried don't work with my ISP CompuServe. To get around this , I can send CompuServe to the task bar and then click and bring up "Explorer". I think I am in pretty good shape now , but , I am still going on to try ALL the scans and more Anti-virus programs.--So--- thank all for your replies and ideas. ---Below is a link to the explanation of the ' Moloch' virus. I will continue to come back to this post for a while just in case there are any more replies. I just want the people to know that I see your reply till the thread is dead. I don't want one person to go off thinking I didn't read their reply.---------------Thanks So Much ---------Don

[Donald]

Woops ! ,I forgot to put in that link about that virus----Don

http://www.commandsoftware.com/virus/db/Detail.cfm?Caroname=Moloch

[jmatt]

Dionald , here is another link if needed .
You can remove most virii onsite , with this one .

http://www3.ca.com/virusinfo/virusscan.aspx