Skip repetitive navigational links
'; return true" onMouseOut="window.status=''; return true") >Previous More Hitsmessage'; return true" onMouseOut="window.status=''; return true") >Next message'; return true" onMouseOut="window.status=''; return true") >Previous More Hitsin topic'; return true" onMouseOut="window.status=''; return true") >Next in topic'; return true" onMouseOut="window.status=''; return true") >Previous More Hitsby same author'; return true" onMouseOut="window.status=''; return true") >Next by same author'; return true" onMouseOut="window.status=''; return true") >Previous page (January 2005)'; return true" onMouseOut="window.status=''; return true") >Back to main PCSOFT page'; return true" onMouseOut="window.status=''; return true") >Subscribe or Unsubscribe to PCSOFT'; return true" onMouseOut="window.status=''; return true") >Reply'; return true" onMouseOut="window.status=''; return true") >Post a new message'; return true" onMouseOut="window.status=''; return true") >Search >Proportional font >Non-proportional fontLog in

Subject:

Re: Anti-Virus confusion

From:

Sven <[log in to unmask]>

Reply-To:

PCSOFT - Personal Computer software discussion list <[log in to unmask]>

Date:

Sun, 23 Jan 2005 12:25:47 -0600

Content-Type:

text/plain

Parts/Attachments:

Parts/Attachments

text/plain (99 lines)

Hi Jeff,

The infected files in question, are they all on the G: (USB) drive? Does
avast! find anything on the other drives? If the infected files are not in
folders protected by Windows (System Volume Information or other), I have no
idea why avast! doesn't take the appropriate action. I assume the G: drive
was connected and turned on when you went through the process of turning
System Restore off and back on. If it wasn't, try that process again with it
connected, turned on and showing as "Turned off" on the System Restore tab
of System Properties prior to the restart.

A note of interest if you have installation files for old programs. They may
contain what is recognized now as Trojan horses by many, if not all, present
day anti-virus programs. Also, there are Web sites when you can get an
online scan, a 'second opinion' of sort. Here are several you can try:

Trend Micro - Free online virus Scan:
http://housecall.trendmicro.com/

Panda ActiveScan - Free online scanner:
http://www.pandasoftware.com/activescan/com/activescan_principal.htm

Symantec Security Check:
http://urlsnip.com/925922

PC Pitstop AntiVirus Center:
http://www.pcpitstop.com/antivirus/default.asp

If none of the above helps please post specifics on some of the files; exact
name, location, etc. Another thought is if, as you said, the G: drive is
only used to transfer files from one computer to another, and the infected
files are confined to the G: drive, a simple solution would be to format the
drive.

Sven Swanson, Sr.

----- Original Message -----
From: "Jeffrey Forman" <[log in to unmask]>
To: <[log in to unmask]>
Sent: Saturday, January 22, 2005 4:14 PM
Subject: Re: [PCSOFT] Anti-Virus confusion


Sven,

       Thanks for your suggestion. Unfortunately, it didn't work. Since you
wrote back this is what I did:

1) Deleted Antivir and installed Avast. Avast showed a few hundred infected
files(trojan-gen).
2) Avast would not delete, move or do anything other than ignor these files.
What do I do next?

Jeff

Date:    Mon, 17 Jan 2005 12:41:45 -0600
From:    Sven <[log in to unmask]>
Subject: Re: Anti-Virus confusion

Hi Jeff,

The file in question does exist on the G: drive. The "System Volume
Information" folder is a hidden Windows System folder and protected by
Windows. Either you have, or had, this infection when Windows established a
routine "System Checkpoint" in System Restore. Since Windows won't allow the
anti-virus, or anything else, into those files, you need to eliminate them
manually by turning off System Restore in this manner:

Go to Start \ Settings \ Control Panel and open "System". Click on the
"System Restore" tab. I suggest you turn off System Restore on all drives by
checking that option. Be aware that this will eliminate all System Restore
points that are presently established, but it will clear any infections that
may exist in any drive restore files. You can also turn it off for
individual drives by selecting that drive and pressing the "Settings..."
button. Once you've made your selections and clicked "OK" on the way out,
close everything and restart the computer.

After the restart, run the anti-virus scans again and you should be clean.
If you encounter a problem running the scans, restart in Safe Mode and run
the scans again. After you get clean scans, return to System Properties and
turn System Restore back on. Since you only use the external drive for
transferring data, I suggest you turn System Restore off for it.

Apparently Norton doesn't have Worm/Spybot31232 in it's definition files and
I couldn't find anything on it. Is that the correct name? You may find
something at the Antivir Web site or in their forums.

Sven Swanson, Sr.

----- Original Message -----
From: "Jeffrey Forman" <[log in to unmask]>
To: <[log in to unmask]>
Sent: Saturday, January 15, 2005 9:59 PM
Subject: [PCSOFT] Anti-Virus confusion

      "Hold No Punches.." Rode brings you great shareware/freeware
        programs with his honest opinions in this weekly column.
                       http://freepctech.com/rode

Advanced Options


Options

Log In

Log In

Get Password

Get Password


Search Archives

Search Archives


Subscribe or Unsubscribe

Subscribe or Unsubscribe


Archives

January 2016
August 2015
August 2014
July 2014
June 2014
May 2014
April 2014
March 2014
February 2014
January 2014
December 2013
November 2013
September 2013
August 2013
July 2013
June 2013
May 2013
April 2013
March 2013
February 2013
January 2013
December 2012
November 2012
October 2012
September 2012
August 2012
July 2012
June 2012
May 2012
April 2012
March 2012
February 2012
January 2012
December 2011
November 2011
October 2011
September 2011
August 2011
July 2011
June 2011
May 2011
April 2011
March 2011
February 2011
January 2011
December 2010
November 2010
October 2010
September 2010
August 2010
July 2010
June 2010
May 2010
April 2010
March 2010
February 2010
January 2010
December 2009
November 2009
October 2009
September 2009
August 2009
July 2009
June 2009
May 2009
April 2009
March 2009
February 2009
January 2009
December 2008
November 2008
October 2008
September 2008
August 2008
July 2008
June 2008
May 2008
April 2008
March 2008
February 2008
January 2008
December 2007
November 2007
October 2007
September 2007
August 2007
July 2007
June 2007
May 2007
April 2007
March 2007
February 2007
January 2007
December 2006
November 2006
October 2006
September 2006
August 2006
July 2006
June 2006
May 2006
April 2006
March 2006
February 2006
January 2006
December 2005
November 2005
October 2005
September 2005
August 2005
July 2005
June 2005
May 2005
April 2005
March 2005
February 2005
January 2005
December 2004
November 2004
October 2004
September 2004
August 2004
July 2004
June 2004
May 2004
April 2004
March 2004
February 2004
January 2004
December 2003
November 2003
October 2003
September 2003
August 2003
July 2003
June 2003
May 2003
April 2003
March 2003
February 2003
January 2003
December 2002
November 2002
October 2002
September 2002
August 2002
July 2002
June 2002
May 2002
April 2002
March 2002
February 2002
January 2002
December 2001
November 2001
October 2001
September 2001
August 2001
July 2001
June 2001
May 2001
April 2001
March 2001
February 2001
January 2001
December 2000
November 2000
October 2000
September 2000
August 2000
July 2000
June 2000
May 2000
April 2000
March 2000
February 2000
January 2000
December 1999
November 1999
October 1999
September 1999
August 1999
July 1999
June 1999
May 1999
April 1999
March 1999
February 1999
January 1999
December 1998
November 1998
October 1998
September 1998
August 1998
July 1998
June 1998
May 1998
April 1998
March 1998
February 1998

ATOM RSS1 RSS2



LISTSERV.ICORS.ORG

Secured by F-Secure Anti-Virus CataList Email List Search Powered by the LISTSERV Email List Manager