-=PCTechTalk=- Re: Email address forgery? Panda AV on line scan

Hi David,
This site is almost specific for your problem;
Detecting and Removing Trojans and Malicious Code from Win2K 
By H. Carvey 
http://online.securityfocus.com/infocus/1627 

The amount of malicious code directed at Windows systems seems to be 
increasing on a continual curve The purpose of this article is to 
recommend steps that an administrator can use to determine whether or not 
a Win2K system has been infected with malicious code or "malware" and, if 
so, to remove it. 

"This article will specifically address network backdoor Trojans and IRC
bots, but the information delivered in this article should assist the reader
in a variety of situations. "
++ There is more on the web site.



If that does not help, the easiest solution at this point may be to try one
of the other on line scanners;
http://www.bitdefender.com/scan/licence.php
http://www.pandasoftware.com/
http://pcpitstop.com/antivirus/AV.asp
http://www.symantec.com/securitycheck
http://www.finjan.com/mcrc/sec_test.cfm
http://housecall.antivirus.com/housecall/start_corp.asp

It may be that the Trojans are blocking your access to the AV sites.

Here are some Trojan help sites which may narrow down the process of
removing them;

 "The Cleaner" is free for 30 days and removes most Trojans.
http://www.moosoft.com

 "TDS-3" is free for 14 days and removes most Trojans.
They also have
some free utilities listed.
        http://tds.diamondcs.com.au/

 "Tauscan" is free for 30 days and removes most Trojans.
        http://www.agnitum.com/

 Anti-Trojan 5 is free for 14 days and removes most Trojans.
        http://www.anti-trojan.net/at.asp?l=en

______________________________________

Mike ~ It is a good day if I learned something new.
Editor MikesWhatsNews see a sample on my web page
http://www.mwn.ca/
<mikeswhatsnews-request@xxxxxxxxxxxxx?Subject=subscribe>
See my Anti-Virus pages  
<http://www3.telus.net/mikebike/mikes_virus_page.htm> 
<virusinfo-request@xxxxxxxxxxxxx?Subject=subscribe>
A Technical Support Alliance Charter Member 
*********** REPLY SEPARATOR  ***********

On 31/01/2003 at 8:05 PM David Morris wrote:

Hello Mike,

Many thanks for your prompt reply.

Yes, it does look as if it is a javascript problem because, if I click and
hold down the left mouse button, the legend reads:-

    "javascript:pp(1,2,63);"

Unfortunately, I know nothing about javascript. It is not mentioned  at all
in the IE Help Index and the only reference to it in the Win2000 Help Index
is to a Windows Script Host review, which is meaningless to me.

Assuming that the problem is at my end, can you please point me in the
direction of a source likely to be able to help me,
bearing in mind that I am pretty well computer-illiterate.

My inability to access the Panda download probably ties up with an
intermittent problem with quite a few hyperlinks on Web pages - sometimes
they work and other times not.

I also run Norton AV2003 (as part of Norton SystemWorks) . Unfortunately,  I
allowed my N AV Live Updates subscription to lapse for quite a short period.
To punish me, in quite a short period, I was infected by IRC Trojan, Trojan
Horse and Hacktool.Flooder, which NAV cannot repair, quarantine or delete. I
have obtained removal instructions from the Symantec site. As these looked
quite straightforward, I thought that I would attempt removal myself. I gave
up when, strangely, I could find no Registry entry relating to the infected
files. Even more strangely, though NAV found these viruses, they did not
show up in its Activity Log. I have not previously encountered viruses, with
which NAV was not able to deal by itself, hence my inexperience here and my
wish to try out Panda. I realise that I now need to obtain expert help.

Regards,

David



To unsub or change your email settings:
http://www.freelists.org/webpage/pctechtalk

To access our Archives:
http://groups.yahoo.com/group/PCTechTalk/messages/
http://www.freelists.org/archives/pctechtalk/

For more info:
http://www.freelists.org/cgi-bin/list?list_id=pctechtalk

Other related posts: