[triadtechtalk] Re: Lovescan.A Virus (Re: triadtechtalk Digest V5 #37)

  • From: avbsantos@xxxxxxxxxxxx
  • To: triadtechtalk@xxxxxxxxxxxxx
  • Date: Sat, 14 Feb 2004 11:44:53 -0800 (PST)

There isn't one in Windows 2000.

You said you thought your XP partition was infected.
If there is a virus/worm in XP and you have "System
Restore" enabled (in ME as well), you need to turn it
off, scan/clean the infection & then re-enable system
restore, otherwise you reinfect your own PC.

2K has no such animal. You can use ERUNT to back up
your registry in 2K/XP/NT:
http://home.t-online.de/home/lars.hederer/erunt/

The best protection is not to open any email from
anyone you don't know and even then it is not unusual
for someone to "spoof" someone else's address and send
you spam/worm/virus with that address, even your very
own.

I've used AVG for 6 yrs. and never got a false
positive.YMMV.

Armando

Computers make very fast, very accurate mistakes.

-------On Sat, 14 Feb 2004 10:41:56 -0800 (PST),
razviam@xxxxxxwrote:

> 
> I tried the Trend Micro "housecall". It scanned all
> partitions and said they
> were clean.
> 
> At least my "free" AVG antivirus found LOVESCAN -
> thanks Housecall!.
> 
> 
> Someone suggested I turn off restore to enable System
> Volume Information folder
> access. How do I do that in WIN2000? 
> 
> I checked Startup and Recovery on Advanced Options Tab
> - but there is not much
> there to uncheck.
> 
> 
> 
> On Sat, 14 Feb 2004 02:03:28 -0500 (EST), FreeLists
> Mailing List Manager wrote:
> 
> > 
> > triadtechtalk Digest        Fri, 13 Feb 2004        Volume: 05 
> Issue: 037
> > 
> > In This Issue:
> >             [triadtechtalk] Re: Is this a virus
> >             [triadtechtalk] Re: Lovescan.A Virus
> >             [triadtechtalk] Re: Lovescan.A Virus
> >             [triadtechtalk] Re: Lovescan.A Virus
> >             [triadtechtalk] Re: Lovescan.A Virus
> > 
> >
>
----------------------------------------------------------------------
> > 
> > From: "Juanita Kimble" <jkimble@xxxxxxxxxxx>
> > Subject: [triadtechtalk] Re: Is this a virus
> > Date: Fri, 13 Feb 2004 21:02:49 -0600
> > 
> > Could this have caused the problem I was having?
> > CW shredder? I believe it has been fixed but when I
> try to run update it
> > freezes.
> > Spybot also found common extensions hijack. I
deleted
> it. But kept the
> > recovery. The mall ware was gone from
> > spybot so I did recover.
> > 
> > Read fourth post to know what I am talking about.
> > 
> > 
> >
>
http://forums.net-integration.net/index.php?showtopic=9877&st=15
> > 
> > There was something simular that i-spyed is doing.
> > Something about deleting all your blocked urls when
> you get the update.
> > I think it might have mentioned Script Sentry. Too
> lazy to go back and read.
> > That was on the i-spyed url
> > though.
> > 
> > 
> > 
> > Juanita
> > 
> > 
> > ---
> > Outgoing mail is certified Virus Free.
> > Checked by AVG anti-virus system
> (http://www.grisoft.com).
> > Version: 6.0.588 / Virus Database: 372 - Release
> Date: 2/13/04
> > 
> > 
> > 
> > ------------------------------
> > 
> > From: razviam@xxxxxxxxxx
> > Subject: [triadtechtalk] Re: Lovescan.A Virus
> > Date: Fri, 13 Feb 2004 19:52:05 -0800 (PST)
> > 
> > try again!
> >  
> >  When I am on the XP partition of my partitoned
drive
> I get the following
> >  message.
> >  
> >  Lovescan.A Virus found in file
> >  
> >  F:\System Volume
>
Information\_restore{C653065-........\Rp13\A0014566.exe
> >  
> >  However when I boot the Win2000 partition, Windows
> blocks access to this
> >  folder. Is there a way of removing the infected
file
> short of re-installing
> >  Windows?
> >  
> >  Arif 
> > 
> > ------------------------------
> > 
> > From: "Juanita Kimble" <jkimble@xxxxxxxxxxx>
> > Subject: [triadtechtalk] Re: Lovescan.A Virus
> > Date: Fri, 13 Feb 2004 22:34:48 -0600
> > 
> > 
> > From: <razviam@xxxxxxxxxx>
> > 
> > 
> > >
> > >  Lovescan.A Virus found in file
> > >
> > 
>
-------------------------------------------------------------
> > All I found while searching was lovescan\msblaster.
I
> take it, that means one
> > of the same. If  so here is a repair
> > tool.
> > 
> > Juanita
> > 
> > 
> > ---
> > Outgoing mail is certified Virus Free.
> > Checked by AVG anti-virus system
> (http://www.grisoft.com).
> > Version: 6.0.588 / Virus Database: 372 - Release
> Date: 2/13/04
> > 
> > 
> > ------------------------------
> > 
> > From: "Juanita Kimble" <jkimble@xxxxxxxxxxx>
> > Subject: [triadtechtalk] Re: Lovescan.A Virus
> > Date: Fri, 13 Feb 2004 23:01:38 -0600
> > 
> > 
> > From: <razviam@xxxxxxxxxx>
> > 
> > >  Lovescan.A Virus found in file
> > 
> > ________________________________________________
> > 
> > 
> > See here: Second item PC solutions.network
> > 
> >
>
http://www.google.com/search?hl=en&lr=&ie=UTF-8&oe=UTF-8&q=lovescan+%2B+msblaster
> > 
> > 
> > 
> > And
> > 
> > 
> > 
> > See here: To make sure you have it
> > 
> >
>
http://pub9.ezboard.com/fcoolpcfrm7.showMessage?topicID=61.topic
> > 
> > 
> > Juanita
> > 
> > 
> > ---
> > Outgoing mail is certified Virus Free.
> > Checked by AVG anti-virus system
> (http://www.grisoft.com).
> > Version: 6.0.588 / Virus Database: 372 - Release
> Date: 2/13/04
> > 
> > ------------------------------
> > 
> > From: avbsantos@xxxxxxxxxxxx
> > Subject: [triadtechtalk] Re: Lovescan.A Virus
> > Date: Fri, 13 Feb 2004 21:07:53 -0800 (PST)
> > 
> > Try scanning your XP partition with an online
> AV/Trojan
> > scanner.
> > 
> > Turn off system restore before you use any of these.
> > The virus is in there also and will only result in
it
> > being reloaded. Just follow the instructions you
> > receive.
> > 
> > online scanners:
> > Trend
> >
>
http://housecall.antivirus.com/housecall/start_corp.asp
> > 
> > Norton
> > http://snurl.com/1jhs
> > 
> > panda's online scanner:
> >
>
http://www.pandasoftware.com/activescan/com/activescan_principal.htm
> > 
> > Trojan
> > http://housecall.trendmicro.com/
> > 
> > You know what infected you? Symantec's removal tools
> > list :
> >
>
http://securityresponse.symantec.com/avcenter/tools.list.html
> > 
> > HTH,
> > A.
> > 
> > On Fri, 13 Feb 2004 19:52:05 -0800 (PST),
> > razviam@xxxxxxxxxx wrote:
> > 
> > > 
> > > try again!
> > >  
> > >  When I am on the XP partition of my partitoned
> drive
> > I
> > > get the following
> > >  message.
> > >  
> > >  Lovescan.A Virus found in file
> > >  
> > >  F:\System Volume
> > >
> >
>
Information\_restore{C653065-........\Rp13\A0014566.exe
> > >  
> > >  However when I boot the Win2000 partition,
Windows
> > > blocks access to this
> > >  folder. Is there a way of removing the infected
> file
> > > short of re-installing
> > >  Windows?
> > >  
> > >  Arif 
> > 
> > ________________________________________________
> > PeoplePC:  It's for people. And it's just smart. 
> > http://www.peoplepc.com 
> > 
> > ------------------------------
> > 
> > End of triadtechtalk Digest V5 #37
> > **********************************
> VIEW ARCHIVES @ //www.freelists.org 
> 
> UNSUBSCRIBE by sending email to
> triadtechtalk-request@xxxxxxxxxxxxx with unsubscribe
in
> the Subject field.
> 
> To VIEW/CHANGE your subscription status go to
> //www.freelists.org/webpage/triadtechtalk
> 
> Contact List Owner - dbcfour@xxxxxxx

________________________________________________
PeoplePC:  It's for people. And it's just smart. 
http://www.peoplepc.com 
VIEW ARCHIVES @ //www.freelists.org 

UNSUBSCRIBE by sending email to triadtechtalk-request@xxxxxxxxxxxxx with 
unsubscribe in the Subject field.

To VIEW/CHANGE your subscription status go to 
//www.freelists.org/webpage/triadtechtalk

Contact List Owner - dbcfour@xxxxxxx

Other related posts:

  • » [triadtechtalk] Re: Lovescan.A Virus (Re: triadtechtalk Digest V5 #37)