rap4rag
Fri May 12 13:21:02 CDT 2006
pDavid: I ran all 4 of the Multi-AV. None of them showed any indication of
a virus. Right after I ran Trend (#2). My avast poped up with a warning of
a virus/Worm in the "C:\AV_CLS\Trend\sysclean.exezz, Malware name:
VBS:Redlof, Malware typeL Virus/Worm, VPS version: 0619-3,05/12/2006".
I received only one warning and that I tried the repair command on. I
couldn't repair so I "moved to chest" as recommended. The rest of the
Multi program came up with a clean conclusion. No indication of removing or
repairing needed or completed. Just no action and no infection. My avast is
popping up with an occasionl warning of the infection in the original file.
My Powerdesk shows that there are 67 more commands (or whatever they are
called; rssgthrsvc\751EACEE97984F10BC14E1DA289412F8\Setup.exe). The avast
never shows the same one and the list used to be over 100(it was possibley
over 200 in the beginning). My guess is the virus has been damaged and
inactive. Broken to the point that the other anti-virus programs no longer
recognize it as such. The avast became aware of it at the beginning of
infection and has been removing the debri left from the first battle(?, for
lack of better name). Now, almost every startup, registry clean up or
anything that involves an indepth scan or search, the avast finds a couple
more that it recognizes as part of the infection and I have been hitting the
delete command. I think ( hope) that eventually it will be totally removed.
What do you think?
"David H. Lipman" wrote:
> From: "rap4rag" <rap4rag@discussions.microsoft.com>
>
> | Excuse me for my lack of skill. This is my first computer and I have had it
> | about 6 months. No training or previous experiance. I downloaded and
> | unziped the Multi AV and nothing happens. Normally I am taken to another
> | file that the program is extracted in and I continue whatever program I am
> | working with from there. Not this time. ( I use the DAP program for
> | downloads and the PowerDesk 6 program for my file system) It unzips and
> | just dissapears. My avast gave a couple more alerts after I ran the killbox
> | on the rssgthrsvc file. The file will not totally delete. I tried the
> | "Hijack". It couldn't see it. I'm going to try a couple more things and be
> | back later.
>
>
> To use this utility, perform the following...
> Execute; Multi_AV.exe { Note: You must use the default folder C:\AV-CLS }
> Choose; Unzip
> Choose; Close
>
> Execute; C:\AV-CLS\StartMenu.BAT
> { or Double-click on 'Start Menu' in C:\AV-CLS }
>
> NOTE: You may have to disable your software FireWall or allow WGET.EXE to go through your
> FireWall to allow it to download the needed AV vendor related files.
>
> C:\AV-CLS\StartMenu.BAT -- { or Double-click on 'Start Menu' in C:\AV-CLS}
> This will bring up the initial menu of choices and should be executed in Normal Mode.
> This way all the components can be downloaded from each AV vendor's web site.
> The choices are; Sophos, Trend, McAfee, Kaspersky, Exit this menu and Reboot the PC.
>
>
> --
> Dave
>
http://www.claymania.com/removal-trojan-adware.html
>
http://www.ik-cs.com/got-a-virus.htm
>
>
>