[windows2000] Re: Virus

  • From: "Ray at work" <listray@xxxxxxxxxx>
  • To: <windows2000@xxxxxxxxxxxxx>
  • Date: Wed, 29 Sep 2004 10:47:50 -0400

This does not sound enjoyable.  Thanks for this info Jeff!

Ray at work
 

> -----Original Message-----
> From: windows2000-bounce@xxxxxxxxxxxxx 
> [mailto:windows2000-bounce@xxxxxxxxxxxxx] On Behalf Of Jeff Stockard

> Just a quick heads up.  I have 2 computers in 2 different networks.  I
> spent a few hours trying to figure out why my accounting guy could not
> get on the Internet.  I got him up and running.  Later that 
> night a lady
> from a different company ( and network ) called and said she could not
> get on the Internet.  She said the bottom bar was showing badurl
> grandstreetinteractive.  I looked it up on the Trend site and found
> nothing, so I did a Google search and found a bunch of usenet posts
> about it.  I also found a Trend link with the removal instructions.  I
> got the lady all set and when I came in to the other office today, the
> accounting guy said he could not get on the Internet again.  I did a
> search on his PC and found the same virus file on his pc that the lady
> had last night.  Wupdt.exe was the file name.  She is running Norton
> 2004 and he is running Trend.  In both cases this virus had installed
> itself in the Anti virus software folders.  Hers was in
> Symnantec\Quarantined and his was in Offscan\suspect.  When I got his
> cleaned up enough to get on the Trend Micro Housecall site, I ran the
> online scan.  I was watching the screen and it said it had scanned 0
> files.  Then a Pop up screen came on, that said Housecall has 
> found and
> cleaned Troj_argent.c please restart your computer.
> To make a short story long, we now have a virus, that tells 
> you that it
> has been removed, so please restart your computer so it can re-infect
> you.


********************************************************
This Weeks Sponsor StressedPuppy.com Games
Feeling stressed out? Check out our games to
relieve your stress.
http://www.StressedPuppy.com
********************************************************
To Unsubscribe, set digest or vacation
mode or view archives use the below link.

http://thethin.net/win2000list.cfm

Other related posts: