W32\Agent.As Virus

TheMSsForum.com: The Microsoft Software Forum

The MSS Forum ‹ Security
- Archive
  - Biz
  - MCSE
  - CRM
  - Drivers
  - Framework
  - ADO
  - ASP
  - Compact
  - Forms
  - Dotnet
  - C#
  - VB
  - FontpageGen
  - Excel
  - WorkSheet
  - Exchange
  - Setup
  - Fox
  - Fontpage
  - ASP
  - IIS
  - Entourage
  - Money
  - Messanger
  - PocketPC
  - Powerpoint
  - Project
  - Publisher
  - Excel
  - VB
  - Security
  - Portal
  - Services
  - SQLServerDev
  - SVCS
  - SQLServer
  - VB
  - VC
  - MFC
  - ExcelGen

- Previous
  - 1
    - avg anti-virus i downloaded this product and it has caused me many problems..but i cannot remove it! any suggestions? Tag: W32\Agent.As Virus Tag: 60153
  - 2
    - HELP SP2 issues, i think I've installed SP2 and now I get an error message when attemping live update with Norton antivirus. This is the error message LU1803:Live update failed while getting your updates. Live update had an internal error while getting your updates. Your Symantec programs were not updated. You should try getting updates at a later time. If live updates fails again with this error, you should reinstall live updates. Should live updates be reinstalled, or is there a setting that just needs to be changed due to the loading of SP2? I've tried getting in touch with Symantec, but that is next to impossible. Thanks!! Judy If I need to reinstall, Do I have to uninstall the whole Norton antivirus/internet security program and then reinstall? Thank you for your help. Judy Tag: W32\Agent.As Virus Tag: 60151
  - 3
    - HELP Sp Tag: W32\Agent.As Virus Tag: 60150
  - 4
    - Operating sytem not found how can I solve the problem , that everytime I start my computer my operating system is not found Tag: W32\Agent.As Virus Tag: 60142
  - 5
    - windows firewall i use a wireless router to connect to the internet the instructions when i set it up said i had to disable firewall to install should i have windows firewall running or is router firewall good enough will running windows firewall be benificial or just redundant Thanks Tag: W32\Agent.As Virus Tag: 60140
  - 6
    - removing networking files I need to ensure that stand alone computers can not achieve internet access, or be networked together. One of the steps is to remove all related files. Currently, I remove all NET*.cabs & win*.cabs. Are there other files I should be removing? Tag: W32\Agent.As Virus Tag: 60132
  - 7
    - Certificate Authority - Setup and Troubleshooting - Help Please? Hi , I need some help with the correct setup and configuration of CA services on Windows 2000 Server. Is this the right place to post my questions? Thanks Tag: W32\Agent.As Virus Tag: 60123
  - 8
    - Norton slows System After upgrading to Norton Internet security 2004 my system takes much longer to boot up and is slow when first opening an application. Since SP2 was installed it seems to have slowed further. Is there a way of disenabling certain Norton functions, and what would they be, to speed up the system? Tag: W32\Agent.As Virus Tag: 60117
  - 9
    - Update # 815021 My XP automatic updater has been trying to install security update # 815021 for a few months. The update has failed every time. May I ask anyone to point me in the right direction. Thanks in advance, Tony Silver City Georgia Tag: W32\Agent.As Virus Tag: 60109
  - 10
    - vpn problems I use Cisco vpn to connect to a secure site. Using XP this worked fine for several months. I have Sygate personal firewall installed as well. Yesterday I installed the XP SP2 and everytime I now try to use the vpn connection (on entering name/password) the screen goes black and the computer re-boots. In re- booting there is automatically a "disc check for consistency" and a number of *.pf files (what are these?) are "not valid". The message indicates that these are "fixed" by copying old files!! One of these is called vpngui.pf, which seems sort of relevant. Any suggestiomns would be appreciated. I have tried turning off the Windows XP firewall (which appeaerd with the XP SP2) but this makes no difference to the propblem. Peter. Tag: W32\Agent.As Virus Tag: 60107
  - 11
    - Map network dive- resource error When I try to map a network drive to my notebook, I get the error "[Network name] not accessible. You might not have permission to use this network resource." I am able to map the drive to another computer on my network so I assume the server is configured properly. (It's not configured as a server, I just use it that way - it's a peer to peer network) The notebook communicates through an internet gateway with no problems. When I look under My Network Places (In Windows Explorer) it shows the network by name but no computers, printers, or folders. If I click on the network name, I get the error as cited above. The only user on any machine is me so I have (I think) total administrator authority. Any suggestions? Thanks. Notebook has XP Home File server has XP Professional Tag: W32\Agent.As Virus Tag: 60098
  - 12
    - Firefox vs IE (restricted sites) I'm contemplating the switch from IE to Firefox. I like Firefox's pop-up blocking, low memory usage compared to IE, etc. One thing that is stopping me is the fact that Firefox doesn't have something like a Restricted Sites zone like IE does. I like the Restricted Sites zone in IE because it's a long list of sites I've compiled so that these sites will not be able to use cookies, ActiveX controls, Java applets, scripting, unwanted pop-ups, auto-installing of unwanted programs like spyware, etc. I'm apprehensive to use Firefox because of this, although I know I can disable certain things in Firefox (like Java, and ActiveX isn't even supported). Am I being too paranoid here or is there something Firefox gives in return for the loss of my cherished list of restricted sites? Tag: W32\Agent.As Virus Tag: 60093
  - 13
    - forgot password I am using Windows 2000, and I forgot my log-on password. What can I do to fix this? Thank you. Tag: W32\Agent.As Virus Tag: 60089
  - 14
    - RealOne Player I recently installed a Windows Update and a firewall was automatically installed. Other changes also took place and as a result I am unable to view video clips from web sites using Real Player. Is there something I can change in my settings to fix this? Thanks, Blake Tag: W32\Agent.As Virus Tag: 60088
  - 15
    - Pop-up Stopper Free Edition Sounds I have Pop-Up Stopper Free Edition (by Panicware). So far, so good, it's working! I only have one problem: when logged in as a user, the sounds that you can choose from (Properties>Pop-up notification) aren't there. However, if I'm logged in as Administrator, the sounds are there. I have gone in to check permissions and it seems I shoul be able to have the sounds under my user account (it shows as "read" in the Properties of the Panicware folder so I don't know why it's not allowing me to use sounds unless I'm logged in as Administrator). Anyone have any clues as to how to fix this? Thank you for your time! Tag: W32\Agent.As Virus Tag: 60087
  - 16
    - XP firewall and new broadband connection Hi Hi I have just changed from dial up to broadband and everything seems to have set up fine but i have found that i can activate xp firewall and it works fine but when i turn off and restart my computer it has turned itself off. I can turn the firewall on again ok but it will be off again when i restart. The new connection is via USB hope someone can help Darren Tag: W32\Agent.As Virus Tag: 60085
  - 17
    - SP2 tom-foolery I just downloaded SP2 and want to know what services should be disabled to keep the dang Windows Security Center and all of it's subsequent services from loading at startup. I all ready disabled Security Center. Is there anything else? Also, I was about to disable the internal firewall but saw that it was tied into the ICS. I didn't think it was tied together in SP1. Is this new? Tag: W32\Agent.As Virus Tag: 60084
  - 18
    - Email Dictionary Attacks Does anybody know if ISA is capable of blocking out Email Dictionary Attacks? I can block certain subnets and as soon as I do, they seem to morph into different subnets. Can't keep up with it manually. Tag: W32\Agent.As Virus Tag: 60083
  - 19
    - kernel32.dll error i am trying to upgrade from win98se to win me. i keep getting a kernel32 error with these no# at 0167:bff7al25. can someone make sense of these for me. please i want to upgrade soon. Tag: W32\Agent.As Virus Tag: 60080
  - 20
    - websites that can bill you phone company???? i have a buddy whose son might have logged into a site said to be "verified" by microsoft. i month later he recieved a bill from the phone company for $70 (14 minutes of use). i opened up the site (it look to possibly be a porn site) and it asks to download a file or something (i didnt DL it for fear of the same charges). the site is below. Question: i heard of 900 numbers that can do this, but not web sites on (AOL) dial up. your feedback/ advice is appreciated. B Easy (nappyfro@hotmail.com) http://www.realplugin.com/cgi-bin/pluginstall.cgi? wm=c2c1d0f8&did=779&pl=index02.html Tag: W32\Agent.As Virus Tag: 60075
  - 21
    - Microsoft Security Alert I can't access web pages once the question, "You are about to view pages over a secure connection" has been asked. The normal Security alert box. E.G. when i try to log onto my hotmail account or fill in other forms. Does anyone know why? Thanks Tag: W32\Agent.As Virus Tag: 60073
  - 22
    - Before You Update to SP2 Visit the following webpages: What to Know Before You Download and Install Windows XP Service Pack 2 http://www.microsoft.com/windowsxp/sp2/sp2_whattoknow.mspx Get the Latest Updates and Information from Your PC Manufacturer Before Installing Windows XP Service Pack 2 http://www.microsoft.com/windowsxp/sp2/oemlinks.mspx Using programs and hardware with Service Pack 2 (SP2) http://support.microsoft.com/default.aspx?scid=fh;ln;xpsp2swhw If running Office 2003 make sure you have the latest Service Pack http://office.microsoft.com/home/default.aspx Windows XP Service Pack 2 Support Center http://support.microsoft.com/default.aspx?scid=fh;EN-US;windowsxpsp2 Bottom line: 1. Make sure your system is up to date with with Microsoft patches and critical updates 2. Make a full back up of your system including System State Data (if running XP Pro also create an Automated System Recovery - ASR - disk) 3. If you have problems, Microsoft is offering free technical support for SP2 - http://support.microsoft.com/default.aspx?scid=fh;en-us;Prodoffer80&sd=GN -- This posting is provided "AS IS" with no warranties, and confers no rights. Please do not send email directly to this alias as it is used for newsgroup participation only. Tag: W32\Agent.As Virus Tag: 60065
  - 23
    - Financial Swindling I received a e-mail from Microsoft Post telling me that I won Euros 1 million from a Microsoft Lottery based on a drawing from all the e-mail addresses. A Mrs. Elizabeth Hous, Lottery Coordinator, Microsoft NL signed the letter. I am asked to contact their fiduciary agent by e- mail at microsoftclaim04@netscape.net. Just want to alert you all to this latest scam. Prasad Tag: W32\Agent.As Virus Tag: 60064
  - 24
    - SystemSuite 5 Firewall and Antivirsus I just installed Service Pack 2 and it did not recognize that I have these products already protecting my computer. The question is: Can I simply not use the Microsoft firewall and antivirus features and be at least as well protected? SystenSuite 5 has worked just fine to date. The only problem I noted is that the SystemSuite 5 help database does not yet adddress this. Tag: W32\Agent.As Virus Tag: 60053
  - 25
    - expat focus expat focus promised to sign me off but my Inbox is still getting flooded with expat messages, what can I do? Tag: W32\Agent.As Virus Tag: 60052
- Next
  - 1
    - Enforce stronger password policy for administrator My Win2K single domain is set to expire passwords every 180 days, 6 characters, password complexity not enabled. I would like to allow members of the Domain Admins group to input at least 9 character passwords (enable complexity) and change passwords every 90 days. The change password age is easy to script and force to change as often as I wish. I am wondering if there is any tool out there that allows me to enforce stronger password requirements for selected groups ? (Password policy is enforced at domain level, and I can't enforce stronger ones at this point). Tag: W32\Agent.As Virus Tag: 60051
  - 2
    - anti virus,s why,ll installing windows SP2 i turned off my anti virus Antivir for windows xp,the upgrade then told me i did not have a anti virus protection what should i do uninstall the antivir protection then install the one microsoft suggested.yours griz Tag: W32\Agent.As Virus Tag: 60042
  - 3
    - How can I check for software piracy? I need to upgrade to Win XP Pro. Recently, I've run across several "Eastern European Companies" who can sell me this program for around $50. They say it's original and comes with a "unique registration code" (key code?) that will enable activation. They say the progams are genuine, fully functional, not demos or academic versions. But, they say these are OEMs, i.e. no box, packaging or manual. They also say these products can't be registered with Microsoft in order to get technical support and rebates. Am I treading on dangerous waters here? Is this legit? Or can I make one of these programs work for me? How can I know if these programs are pirated? Anybody out there have an answer? Here's a url of just one of the companies I found: http://softforyou.biz/index.html Thanks! Tag: W32\Agent.As Virus Tag: 60040
  - 4
    - Sp2 Firewall, also Homepage Just checked firewall on cable connection after Sp2 install. 1) Under exceptions, remote assist is checked but I have not enabled it in System Properties, nor did I enable it in firewall. Is there some other meaning to this that it needs be on? 2) Under Advanced, Msmsgs is enabled for Tcp & Udp. I disable Msn Messenger in Windows applications because I think it may a source of malicious attack. I use Outlook but without messenger activation. Again, is there a reason for this being auto set? Non firewall question: Does ones homepage mean anything more than what one sees when activating Browser? I find that msn.com for example is slow to fully load at times, so I tried www.null.com which does nothing according to source code and as proof, loads really fast. Thanks for any help. Tag: W32\Agent.As Virus Tag: 60037
  - 5
    - What is https proxy for? There are some free https proxy released on some websites. How can I use them while surfing the internet? What is the difference between socks proxy? Can I use it for the SSL login of my hotmail account? Tag: W32\Agent.As Virus Tag: 60033
  - 6
    - RDP Client disconnects after 10mins Inactivity I have a W2K3 TS running with RDP clients and everything works well but my RDP clients get disconnected if inactive for 10 minutes. I have set and configure every possible setting I could find (local computer admin templates policies, user admin templates, group policies, domain policies etc...)to allow for "no disconnection" but it keeps happening, I must be missing something or mabe this is built in feature? I even removed screen saver on local and TS desktops No Firewall, Nothing on event log No disconnection warning given thanks Tag: W32\Agent.As Virus Tag: 60029
  - 7
    - Disable scrypt ... Bug on all IE 5,6 and Windows XP SP2 ... http://www.k-otik.net/bugtraq/08222004.IEDragNdrop.php Disable Script Java ... Kappa. Tag: W32\Agent.As Virus Tag: 60028
  - 8
    - Security logon in WinXP Very often I experience a problem in both WinXP Home and Pro. When I start typing a password login, e.g. to a bank, typed letters frequently automatically jump to upper window (User Name) and became visible in my display??? And may be, for somebody else who try to steal my information??? What is it? WinXP fraud or something else?? Thank you for any information. Best, Alex Tag: W32\Agent.As Virus Tag: 60026
  - 9
    - How do I make a network user login a Local Administrator? Attempting an install of software that requires Local Administrator rights while logging onto the network. O/S -- PC with Windows XP Professional, a server with 2003 Server, and myriad other servers in a domain... I thought that when you create a Local Administrator user on a workstation, with the same username and password as on the domain, it would authenticate the user in the domain, while allowing the Local Administrator privileges. This doesn't appear to be the case. Every time I log into the domain with the username and password (which is the same username and password on the PC (as a Local Administrator) as in the domain (I'm not sure what rights/privileges are given)), I receive an error during the install stating that I didn't have sufficient rights. When I go into Local Users and Groups, I am unable to change or add anything. If I log out of the domain and into "this PC", I am able to alter Local Users and Groups, but then I am not on the network as an authenticated user... How do I accomplish making the network user login a Local Administrator on the PC? Tag: W32\Agent.As Virus Tag: 60019
  - 10
    - Adware? Today I had to go into my add/remove programs to remove and obsolete printer after updating with XP home SP2. I noticed 2 programs right away that should not be there... "Home Search Assistant" & "Search Extender". When I go to remove it send me to this site:http://looking- for.cc/uninstall/SearchExtender.html. And tells me to download a progam and run it?????? Is this a good Idea???? Tag: W32\Agent.As Virus Tag: 60014
  - 11
    - Xp SP2 puts unwanted Windows Security Alerts Icon in taskbar XP SP2 installed with no problem I've yet noticed other than for unwanted Windows Security Alerts icon in taskbar. I'm running a hardware firewall (Linksys router) and anti-virus and firewall programs not recognized by Windows. How can I keep this icon from showing up in my taskbar?--is there a specific registry edit tweak and/or some other means of keeping this icon from appearing? Tag: W32\Agent.As Virus Tag: 60013
  - 12
    - HELP HELP PLEASe I am running norton sercutiy and it is now redirecting my brower to lop.com/search/search.cgi?s=internet 8src=epage how do I stop this. if I don't put the norton on I disable it the web sites come up fine Tag: W32\Agent.As Virus Tag: 60012
  - 13
    - Updated FAQ available for MBSA 1.2.1 I wanted to alert everyone that a new version of the MBSA FAQ is now posted - thanks to your feedback on the newsgroups! http://www.microsoft.com/technet/security/tools/mbsaqa.mspx New in the FAQ : Q. What versions of MBSA are supported? A. PSS only supports the latest version of MBSA which is currently 1.2.1. The mssecure.xml file that MBSA uses to identify missing security updates is different for MBSA 1.2+ than for earlier versions. As of April 20th, 2004, the mssecure.xml file used by earlier versions is no longer being updated. Therefore, scans performed with MBSA 1.1.1 or earlier versions will be incomplete. Users running less than MBSA 1.2.1 will see a message notifying them that 1.2.1 is available. Q. Do I need to uninstall MBSA 1.2 before installing MBSA 1.2.1? A. No, MBSA 1.2.1 will automatically uninstall any previous version of MBSA before installing MBSA 1.2.1 Q. Does MBSA support 64-bit Windows? A. No. Q. What is the current version of MBSA? Why do I see conflicting version numbering in the product? A. The latest version of MBSA is version 1.2.1 - which is also referred to as 1.2.4013.0 on some screens. The 4013.0 refers to build versioning. The official version number exists in the "About Microsoft Baseline Security Analyzer" link. If you are running MBSA 1.2 you will see a message that a new version 1.2.4013.0 is available. Q. What settings are required for a successful remote scan of a Windows XP SP2 machine? A. This is addressed in the "readme.html" file in the "Help" directory under the "#firewall" section. If you require remote scanning of Windows XP Service Pack 2 machines, these conditions must be met : . The Server service, Remote Registry service, and File & Print Sharing services must be enabled. . Remote machine scans are performed using TCP ports 139 and 445. In a multi-domain environment, where a firewall or filtering router separates the two networks, TCP ports 139 and 445 and UDP ports 137 and 138 must be open in order for MBSA to connect and authenticate to the remote network being scanned. You must allow these ports on the remote Windows Firewall. -- Mike Chan Technical Product Manager (MBSA) Security Business Unit Microsoft Corporation This posting is provided "AS IS" with no warranties, and confers no rights. -- Tag: W32\Agent.As Virus Tag: 60007
  - 14
    - how to open port 2047 a site tech told me to make sure that port 2047 is open. How do I do that? Thanks for the help. Tag: W32\Agent.As Virus Tag: 60004
  - 15
    - XP SP2 and Active-X and Explorer Call me stupid ("Hi, Stupid!") but after service pack 2, Explorer pops up with an objection and dialog whenever I want to run something that uses Active-X through the brower. (Zoomify, for example). I tried stifling the warning/objection through Explorer's security options, but it didn't help. What exact options am I missing? Also, SP2 deleted all my shortcuts to Explorer. No big deal, really. Tag: W32\Agent.As Virus Tag: 59997
  - 16
    - reply to spyware jerks Thanks, I've been so busy trying to remove this thing I forgot to submit it to spybot. It wouldn't be that hard to remove it if the system would recognize it but this guy pulled off a sneaky deal. The bad thing is it doesn't show any connection or trace route or any way to get to it. Thanks again to all. Tag: W32\Agent.As Virus Tag: 59994
  - 17
    - NTFS Backups to External Hard Drive I am running Windows XP Professional SP1. I recently purchased a 120G external hard drive and formatted it as an NTFS partition. I am using the external hard drive to backup files from my computer (My Documents, some software installation files, and a few other directories), and then I am planning to reformat my PC and restore the files from the external hard drive. I was wanting to know, is anything I will need to do as far as NTFS security permissions on the external hard drive folders to ensure that I will have access the files after I reformat my computer and reinstall Windows XP Professional? Thank you for your time. Tag: W32\Agent.As Virus Tag: 59989
  - 18
    - SpywareWarriors Vs. PrivacyToolsVendor If you all don't read the Spyware Warrior forums, you are really missing out on something that you have to see if only for the entertaining yet surreal look of it (sort of like a fatal highway crash). There, a vendor of the allegedly rogue anti-spyware app "Privacy Tools 2004" posted to defend his product and ask for opinions on how he can fix the problems with it. From there, it went downhill fast! The vendor ("Ash1ey") went on to berate the posters there, actually threatened to ADD spyware in the app that was supposedly suppose to scan and remove it, and now threatens legal action! This is too good to be missed! This is a look into the mind of one of these people trying to make a quick buck off unsuspecting consumers. It's a must read! http://www.spywarewarrior.com/viewtopic.php? p=25034&highlight=#25034 (For those unfamiliar with Spyware Warrior, http://www.netrn.net/spywareblog/ is a spyware blog and http://www.spywarewarrior.com/rogue_anti-spyware.htm is the great guide to anti-spyware apps you should NOT get!) Tag: W32\Agent.As Virus Tag: 59979
  - 19
    - servers in russia? I am not sure if i am posting to the correct newsgroup, but here goes. When I start my computer and the firewall is activated, my firewall ("zero-knowledge Freedom")is programmed to ask me whether to accept or deny access to my computer from outside servers that are ostensibly related to various software programs. One of the programs for which i receive a message is Windows Explorer. What seems odd to me is that the IP address of the remote server is alternatively in Russia and berlin germany. Does Microsoft really host some of its stuff on servers in Russia and germany. For Russia, the host name is listed as 62.118.251.84 and the destination IP address is : v20-u.valuehost.ru For Berlin, the Host name is 141.45.186.7 and the destination IP is: dozenten.f1.fhtw-berlin-de Does this seem odd or am I getting paranoid? If this is a spoof, how do I stop their server from attempting to access my system? Tag: W32\Agent.As Virus Tag: 59977
  - 20
    - password protecting folders - is it possible??? i want to set passwords for individual folders so that only i can access the contents of those folders. is this possible with windows xp? how? thanks. Tag: W32\Agent.As Virus Tag: 59972
  - 21
    - system backup i am trying to backup my system onto cd but it keeps asking to type a name for this cd is there a certain way to write this Tag: W32\Agent.As Virus Tag: 59969
  - 22
    - Internet History/Internet Temp Files Is there a way to block the deletion of history, etc., so that I know what is being accessed by others on my machine? Tag: W32\Agent.As Virus Tag: 59964
  - 23
    - ** READ THIS BEFORE POSTING - answers to frequently asked questions 2004.08.25 Before you post a question to a Microsoft.public.*.security newsgroup, note that your question may already be answered below: Answers to Top Frequently Asked Questions: http://securityadmin.info My question is not mentioned below. How do I get an answer immediately, with no waiting? http://securityadmin.info/faq.asp#moreinfo See also: http://www.google.com/groups?as_ugroup=microsoft.public.* See also: http://www.google.com/advanced_group_search See also: http://www.google.com I want to post a problem or question to the newsgroup. What info do I need to post in order to get a correct answer quickly? http://securityadmin.info/faq.asp#netiquette I just heard about a new Microsoft security patch update. Where can I get the patch? http://windowsupdate.microsoft.com OR http://www.microsoft.com/technet/security/current.asp I just installed a Microsoft security patch update, and now my computer is having problems. http://securityadmin.info/faq.asp#patchbroke I received an email from Microsoft / Microsoft Support / Microsoft Internet Security Center claiming to be a security patch [or comprehensive Internet Explorer update]. Is this a virus? http://securityadmin.info/faq.asp#microsoftemail ALSO NOTE: www.grisoft.com is free antivirus, USE IT. I received a virus email from a Microsoft email address. Who do I report this to? http://securityadmin.info/faq.asp#microsoftemail I have the RPC Blaster worm "virus," what do I do? http://www.microsoft.com/security/incident/blast.asp ALSO NOTE: www.grisoft.com is free antivirus, USE IT. My computer is giving RPC Remote Procedure Call messages. There is a TFTP message or file on my computer. My computer keeps locking up, and/or rebooting, or telling me that it will reboot in 1 minute. http://www.microsoft.com/security/incident/blast.asp ALSO NOTE: www.grisoft.com is free antivirus, USE IT. Where can I download the Blaster worm / RPC DCOM patch? http://windowsupdate.microsoft.com OR http://www.microsoft.com/technet/security/current.asp I'm having a problem caused by the JDBGMGR.EXE Teddy Bear "virus" hoax, or I want to replace this file. http://securityadmin.info/faq.asp#jdbgmgr I forgot my Windows logon password and can't log in. How do I reset it? http://securityadmin.info/faq.asp#password I have a problem or a question with a virus or with antivirus. http://securityadmin.info/faq.asp#virus NOTE: www.grisoft.com is free antivirus, USE IT. Why is Outlook Express blocking my attachments as "unsafe"? http://securityadmin.info/faq.asp#attachments How do I stop getting pop-up messages? Or adware? Or spyware? http://securityadmin.info/faq.asp#pop-ups How do I block people from viewing adult or objectionable content on a computer? http://securityadmin.info/faq.asp#contentfilter How do I block spam emails? http://securityadmin.info/faq.asp#spam There is a Content Advisor password blocking me from certain web sites. http://securityadmin.info/faq.asp#contentadvisor How do I delete an FTP folder that a hacker put on my computer and I cannot delete? http://securityadmin.info/faq.asp#ftpfolder Have I been hacked? What do I do if I've been hacked? http://securityadmin.info/faq.asp#hacked How do I re-secure a computer that has been hacked? http://securityadmin.info/faq.asp#re-secure How do I test or improve the security on my computer to avoid being hacked? http://securityadmin.info/faq.asp#harden How do I investigate a suspicious IP address that may be trying to hack me? http://securityadmin.info/faq.asp#trace How do I report a hacker? http://securityadmin.info/faq.asp#reporthacker How do I use a port scanner or vulnerability scanner to test my security? http://securityadmin.info/faq.asp#portscanner How do I encrypt my files and/or hard drive? http://securityadmin.info/faq.asp#encryption How do I get a firewall? IDS? http://securityadmin.info/faq.asp#firewall I want to use the IPSec filtering or IP filtering feature of Windows to block certain ports and have a problem or question. http://securityadmin.info/faq.asp#ipsec I have a problem or question with the XP ICF firewall. http://securityadmin.info/faq.asp#icf I have a problem or question with the IIS URLScan tool. http://securityadmin.info/faq.asp#urlscan How do I change the banner on my computer or server to hide what software version I'm using? http://securityadmin.info/faq.asp#banner How do I enable Windows Auditing to tell who logged into Windows or who accessed a file? http://securityadmin.info/faq.asp#auditing How do I inspect and disable programs that start up when Windows starts? http://securityadmin.info/faq.asp#startup How do I use RUNAS or let someone use RUNAS to run commands as administrator without having to type the password? http://securityadmin.info/faq.asp#runas How do I let non-administrator users run Defrag or change their IP address? http://securityadmin.info/faq.asp#runas My question is not mentioned above. How do I get an answer immediately, with no waiting? http://securityadmin.info/faq.asp#moreinfo See also: http://www.google.com/groups?as_ugroup=microsoft.public.* See also: http://www.google.com/advanced_group_search See also: http://www.google.com I want to post a problem or question to the newsgroup. What info do I need to post in order to get a correct answer quickly? http://securityadmin.info/faq.asp#netiquette Note that this is NOT a full list of all the questions answered in the FAQ. Chances are, your question has probably already been answered. The complete FAQ is at: http://securityadmin.info/faq.asp#contents I hope this is helpful. Feedback, suggestions and criticism regarding the FAQ are welcome and may be emailed to me. kind regards, Karl Levinson, CISSP, MCSE, MVP email: levinson_k@despammed.com Tag: W32\Agent.As Virus Tag: 59960
  - 24
    - Logging in windows Hi I need to know whether net send messages are logged by windows and if so where can I find them and what information they contain. Am trying to track someone who has been sending threatening messages across our network. Thanx in advance Rich Tag: W32\Agent.As Virus Tag: 59956
  - 25
    - Changing password I have a large windows 2000 network. I would like to get users to change their passwords in a staggered fashion. Is there any way in windows that I can set up a method to get users to change their passwords then have those passwords come up for re entering at times in the future. Tag: W32\Agent.As Virus Tag: 59951

I have this virus...and I have ran nortons as well as my telus anti-virus
scan and both have found some and have deleted them but both are unable to
disinfect or delete this one. It tells me to manually delete this file but
when I try to do so it says that it is write protected or in use and wont let
me. Is there anyway of changing the settings on this file so i can delete ? I
am on windows xp. The complete address to this virus
is....C:\Windows\system32\ntgz exe. but from what i understand this virus
sends out new files that are corrupted and my scan does find these and
deletes them... but I think it all starts with this one file. Any suggestions?

Top

Re: W32\Agent.As Virus by G

G
Fri Aug 27 14:33:04 CDT 2004

confused wrote:

> I have this virus...and I have ran nortons as well as my telus anti-virus
> scan and both have found some and have deleted them but both are unable to
> disinfect or delete this one. It tells me to manually delete this file but
> when I try to do so it says that it is write protected or in use and wont let
> me. Is there anyway of changing the settings on this file so i can delete ? I
> am on windows xp. The complete address to this virus
> is....C:\Windows\system32\ntgz exe. but from what i understand this virus
> sends out new files that are corrupted and my scan does find these and
> deletes them... but I think it all starts with this one file. Any suggestions?

Boot into Safe Mode and delete it, it probably will not be loaded so you
can access it. Another option is MoveOnBoot which can be set to delete
or move a file at the next boot before the file loads. I have it
installed at home and I do not have the URL here.

g-w

Top