Re: do i have a virus?
On 22 Oct 2008 at 9:23, Lee Douglas wrote: Check out diescum if you wish to continue to fool Got a URL for diescum? Searching the list archives doesn't find one: http://lyris.sunbelt- software.com/read/search/results?forum=ntsysadminwords=diescumsb=1 ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~
Re: do i have a virus?
http://diescum.freesitespace.net/diescum4.html -- ME2 On Thu, Oct 23, 2008 at 12:31 PM, Angus Scott-Fleming [EMAIL PROTECTED] wrote: On 22 Oct 2008 at 9:23, Lee Douglas wrote: Check out diescum if you wish to continue to fool Got a URL for diescum? Searching the list archives doesn't find one: http://lyris.sunbelt- software.com/read/search/results?forum=ntsysadminwords=diescumsb=1 ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~
RE: do i have a virus?
DIESCUM is no longer recommended for recovery from infections. I created it so I can say that authoritatively. Time to move on - the only reliable (and still free) recovery is nuke and pave. I will say this, I've heard good things about Malwarebytes for cleaning up after infection. They still think they can do it, and maybe they are successful a lot of the time - certainly their solution is far faster than DIESCUM ever was. Carl -Original Message- From: Angus Scott-Fleming [mailto:[EMAIL PROTECTED] Sent: Thursday, October 23, 2008 12:31 PM To: NT System Admin Issues Subject: Re: do i have a virus? On 22 Oct 2008 at 9:23, Lee Douglas wrote: Check out diescum if you wish to continue to fool Got a URL for diescum? Searching the list archives doesn't find one: ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~
R: do i have a virus?
Nuke and pave is not so free... GuidoElia HELPPC -Messaggio originale- Da: Carl Houseman [mailto:[EMAIL PROTECTED] Inviato: giovedì 23 ottobre 2008 19.01 A: NT System Admin Issues Oggetto: RE: do i have a virus? DIESCUM is no longer recommended for recovery from infections. I created it so I can say that authoritatively. Time to move on - the only reliable (and still free) recovery is nuke and pave. I will say this, I've heard good things about Malwarebytes for cleaning up after infection. They still think they can do it, and maybe they are successful a lot of the time - certainly their solution is far faster than DIESCUM ever was. Carl -Original Message- From: Angus Scott-Fleming [mailto:[EMAIL PROTECTED] Sent: Thursday, October 23, 2008 12:31 PM To: NT System Admin Issues Subject: Re: do i have a virus? On 22 Oct 2008 at 9:23, Lee Douglas wrote: Check out diescum if you wish to continue to fool Got a URL for diescum? Searching the list archives doesn't find one: ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~
RE: do i have a virus?
It's better than free because it's faster! At least if you have the right deployment tools setup up. I can image a PC in 3 minutes, have deployed in about 20 minutes. I'm sure cleaning a Virus takes much longer than that! Time is money. -Original Message- From: HELP_PC [mailto:[EMAIL PROTECTED] Sent: Thursday, October 23, 2008 12:16 PM To: NT System Admin Issues Subject: R: do i have a virus? Nuke and pave is not so free... GuidoElia HELPPC -Messaggio originale- Da: Carl Houseman [mailto:[EMAIL PROTECTED] Inviato: giovedì 23 ottobre 2008 19.01 A: NT System Admin Issues Oggetto: RE: do i have a virus? DIESCUM is no longer recommended for recovery from infections. I created it so I can say that authoritatively. Time to move on - the only reliable (and still free) recovery is nuke and pave. I will say this, I've heard good things about Malwarebytes for cleaning up after infection. They still think they can do it, and maybe they are successful a lot of the time - certainly their solution is far faster than DIESCUM ever was. Carl -Original Message- From: Angus Scott-Fleming [mailto:[EMAIL PROTECTED] Sent: Thursday, October 23, 2008 12:31 PM To: NT System Admin Issues Subject: Re: do i have a virus? On 22 Oct 2008 at 9:23, Lee Douglas wrote: Check out diescum if you wish to continue to fool Got a URL for diescum? Searching the list archives doesn't find one: ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~
RE: do i have a virus?
Neither was DIESCUM, about the same price, and usually more expensive on older hardware. -Original Message- From: HELP_PC [mailto:[EMAIL PROTECTED] Sent: Thursday, October 23, 2008 1:16 PM To: NT System Admin Issues Subject: R: do i have a virus? Nuke and pave is not so free... GuidoElia HELPPC -Messaggio originale- Da: Carl Houseman [mailto:[EMAIL PROTECTED] Inviato: giovedì 23 ottobre 2008 19.01 A: NT System Admin Issues Oggetto: RE: do i have a virus? DIESCUM is no longer recommended for recovery from infections. I created it so I can say that authoritatively. Time to move on - the only reliable (and still free) recovery is nuke and pave. I will say this, I've heard good things about Malwarebytes for cleaning up after infection. They still think they can do it, and maybe they are successful a lot of the time - certainly their solution is far faster than DIESCUM ever was. Carl -Original Message- From: Angus Scott-Fleming [mailto:[EMAIL PROTECTED] Sent: Thursday, October 23, 2008 12:31 PM To: NT System Admin Issues Subject: Re: do i have a virus? On 22 Oct 2008 at 9:23, Lee Douglas wrote: Check out diescum if you wish to continue to fool Got a URL for diescum? Searching the list archives doesn't find one: ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~
do i have a virus?
Hi, Two days ago our printers disappeared from our windows xp machine. After trying to add them again, we got an error that we couldn't run because printer spooler is not running. When I went to start the printer spooler, I got an error saying that it couldn't be run (error 1804). After googling a bit, some people said that we could have viruses on the machine. We have symantec installed, and after scanning we got some viruses that were quarantined. We tried to uninstall Symantec and install McAfee but now we get an error saying that the windows installer cannot be run. Microsoft recommends reregister the windows installer (which we have done) and if it doesn't work, rename dlls and the windows installer and install it again. Since I don't trust very much this reinstall of the windows installer as a solution, anyone can give me any hint of what might be happening or we should check beforehand? Thanks in advance Miguel ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~
RE: do i have a virus?
-Original Message- From: Miguel Gonzalez [mailto:[EMAIL PROTECTED] Subject: do i have a virus? Two days ago our printers disappeared from our windows xp machine. After trying to add them again, we got an error that we couldn't run because printer spooler is not running. When I went to start the printer spooler, I got an error saying that it couldn't be run (error 1804). After googling a bit, some people said that we could have viruses on the machine. We have symantec installed, and after scanning we got some viruses that were quarantined. We tried to uninstall Symantec and install McAfee but now we get an error saying that the windows installer cannot be run. Microsoft recommends reregister the windows installer (which we have done) and if it doesn't work, rename dlls and the windows installer and install it again. Since I don't trust very much this reinstall of the windows installer as a solution, anyone can give me any hint of what might be happening or we should check beforehand? I know this doesn't answer your question - UT - dump McCrappy and Symantec and try Vipre. Webster ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~
RE: do i have a virus?
Or V2.7 of NOD32 :) S -Original Message- From: Webster [mailto:[EMAIL PROTECTED] Sent: Wednesday, October 22, 2008 9:13 AM To: NT System Admin Issues Subject: RE: do i have a virus? -Original Message- From: Miguel Gonzalez [mailto:[EMAIL PROTECTED] Subject: do i have a virus? Two days ago our printers disappeared from our windows xp machine. After trying to add them again, we got an error that we couldn't run because printer spooler is not running. When I went to start the printer spooler, I got an error saying that it couldn't be run (error 1804). After googling a bit, some people said that we could have viruses on the machine. We have symantec installed, and after scanning we got some viruses that were quarantined. We tried to uninstall Symantec and install McAfee but now we get an error saying that the windows installer cannot be run. Microsoft recommends reregister the windows installer (which we have done) and if it doesn't work, rename dlls and the windows installer and install it again. Since I don't trust very much this reinstall of the windows installer as a solution, anyone can give me any hint of what might be happening or we should check beforehand? I know this doesn't answer your question - UT - dump McCrappy and Symantec and try Vipre. Webster ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~
RE: do i have a virus?
I'm trying for now with Kaspersky online scanner and TrendMicro online scanner. Unfortunately I get a warning when i try to install any AV saying that the sysadmin (I'm the sysadmin!) policies don't let me to install this software. Kaspersky is at 80% and have found several trojans... Miguel --- El mié, 22/10/08, Martin Blackstone [EMAIL PROTECTED] escribió: De: Martin Blackstone [EMAIL PROTECTED] Asunto: RE: do i have a virus? Para: NT System Admin Issues ntsysadmin@lyris.sunbelt-software.com Fecha: miércoles, 22 octubre, 2008 9:00 Drop the zero and get with the hero! -Original Message- From: Webster [mailto:[EMAIL PROTECTED] Sent: Wednesday, October 22, 2008 5:13 AM To: NT System Admin Issues Subject: RE: do i have a virus? -Original Message- From: Miguel Gonzalez [mailto:[EMAIL PROTECTED] Subject: do i have a virus? Two days ago our printers disappeared from our windows xp machine. After trying to add them again, we got an error that we couldn't run because printer spooler is not running. When I went to start the printer spooler, I got an error saying that it couldn't be run (error 1804). After googling a bit, some people said that we could have viruses on the machine. We have symantec installed, and after scanning we got some viruses that were quarantined. We tried to uninstall Symantec and install McAfee but now we get an error saying that the windows installer cannot be run. Microsoft recommends reregister the windows installer (which we have done) and if it doesn't work, rename dlls and the windows installer and install it again. Since I don't trust very much this reinstall of the windows installer as a solution, anyone can give me any hint of what might be happening or we should check beforehand? I know this doesn't answer your question - UT - dump McCrappy and Symantec and try Vipre. Webster ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~
RE: do i have a virus?
I would just FDisk this machine. Assuming nothing out of the ordinary you would already be done with it. -Original Message- From: Miguel Gonzalez [mailto:[EMAIL PROTECTED] Sent: Wednesday, October 22, 2008 9:05 AM To: NT System Admin Issues Subject: RE: do i have a virus? I'm trying for now with Kaspersky online scanner and TrendMicro online scanner. Unfortunately I get a warning when i try to install any AV saying that the sysadmin (I'm the sysadmin!) policies don't let me to install this software. Kaspersky is at 80% and have found several trojans... Miguel --- El mié, 22/10/08, Martin Blackstone [EMAIL PROTECTED] escribió: De: Martin Blackstone [EMAIL PROTECTED] Asunto: RE: do i have a virus? Para: NT System Admin Issues [EMAIL PROTECTED] software.com Fecha: miércoles, 22 octubre, 2008 9:00 Drop the zero and get with the hero! -Original Message- From: Webster [mailto:[EMAIL PROTECTED] Sent: Wednesday, October 22, 2008 5:13 AM To: NT System Admin Issues Subject: RE: do i have a virus? -Original Message- From: Miguel Gonzalez [mailto:[EMAIL PROTECTED] Subject: do i have a virus? Two days ago our printers disappeared from our windows xp machine. After trying to add them again, we got an error that we couldn't run because printer spooler is not running. When I went to start the printer spooler, I got an error saying that it couldn't be run (error 1804). After googling a bit, some people said that we could have viruses on the machine. We have symantec installed, and after scanning we got some viruses that were quarantined. We tried to uninstall Symantec and install McAfee but now we get an error saying that the windows installer cannot be run. Microsoft recommends reregister the windows installer (which we have done) and if it doesn't work, rename dlls and the windows installer and install it again. Since I don't trust very much this reinstall of the windows installer as a solution, anyone can give me any hint of what might be happening or we should check beforehand? I know this doesn't answer your question - UT - dump McCrappy and Symantec and try Vipre. Webster ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~
Re: do i have a virus?
Blow it and rebuild why are you wasting your time? Jon On Wed, Oct 22, 2008 at 9:05 AM, Miguel Gonzalez [EMAIL PROTECTED] wrote: I'm trying for now with Kaspersky online scanner and TrendMicro online scanner. Unfortunately I get a warning when i try to install any AV saying that the sysadmin (I'm the sysadmin!) policies don't let me to install this software. Kaspersky is at 80% and have found several trojans... Miguel --- El mié, 22/10/08, Martin Blackstone [EMAIL PROTECTED] escribió: De: Martin Blackstone [EMAIL PROTECTED] Asunto: RE: do i have a virus? Para: NT System Admin Issues ntsysadmin@lyris.sunbelt-software.com Fecha: miércoles, 22 octubre, 2008 9:00 Drop the zero and get with the hero! -Original Message- From: Webster [mailto:[EMAIL PROTECTED] Sent: Wednesday, October 22, 2008 5:13 AM To: NT System Admin Issues Subject: RE: do i have a virus? -Original Message- From: Miguel Gonzalez [mailto:[EMAIL PROTECTED] Subject: do i have a virus? Two days ago our printers disappeared from our windows xp machine. After trying to add them again, we got an error that we couldn't run because printer spooler is not running. When I went to start the printer spooler, I got an error saying that it couldn't be run (error 1804). After googling a bit, some people said that we could have viruses on the machine. We have symantec installed, and after scanning we got some viruses that were quarantined. We tried to uninstall Symantec and install McAfee but now we get an error saying that the windows installer cannot be run. Microsoft recommends reregister the windows installer (which we have done) and if it doesn't work, rename dlls and the windows installer and install it again. Since I don't trust very much this reinstall of the windows installer as a solution, anyone can give me any hint of what might be happening or we should check beforehand? I know this doesn't answer your question - UT - dump McCrappy and Symantec and try Vipre. Webster ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~
Re: do i have a virus?
Having spent days fiddling with a machine to fix a problem that I knew was going to require a format and re-install, I second the recommendation that you just scrub it and re-install. If it has any personal information on it, including credit cards or bank info, all the more reason to do it. Check out diescum if you wish to continue to fool with the machine, but you are very likely to be just fooling yourself that you can fix it. On Wed, Oct 22, 2008 at 9:15 AM, Jon Harris [EMAIL PROTECTED] wrote: Blow it and rebuild why are you wasting your time? Jon On Wed, Oct 22, 2008 at 9:05 AM, Miguel Gonzalez [EMAIL PROTECTED] wrote: I'm trying for now with Kaspersky online scanner and TrendMicro online scanner. Unfortunately I get a warning when i try to install any AV saying that the sysadmin (I'm the sysadmin!) policies don't let me to install this software. Kaspersky is at 80% and have found several trojans... Miguel --- El mié, 22/10/08, Martin Blackstone [EMAIL PROTECTED] escribió: De: Martin Blackstone [EMAIL PROTECTED] Asunto: RE: do i have a virus? Para: NT System Admin Issues ntsysadmin@lyris.sunbelt-software.com Fecha: miércoles, 22 octubre, 2008 9:00 Drop the zero and get with the hero! -Original Message- From: Webster [mailto:[EMAIL PROTECTED] Sent: Wednesday, October 22, 2008 5:13 AM To: NT System Admin Issues Subject: RE: do i have a virus? -Original Message- From: Miguel Gonzalez [mailto:[EMAIL PROTECTED] Subject: do i have a virus? Two days ago our printers disappeared from our windows xp machine. After trying to add them again, we got an error that we couldn't run because printer spooler is not running. When I went to start the printer spooler, I got an error saying that it couldn't be run (error 1804). After googling a bit, some people said that we could have viruses on the machine. We have symantec installed, and after scanning we got some viruses that were quarantined. We tried to uninstall Symantec and install McAfee but now we get an error saying that the windows installer cannot be run. Microsoft recommends reregister the windows installer (which we have done) and if it doesn't work, rename dlls and the windows installer and install it again. Since I don't trust very much this reinstall of the windows installer as a solution, anyone can give me any hint of what might be happening or we should check beforehand? I know this doesn't answer your question - UT - dump McCrappy and Symantec and try Vipre. Webster ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~
RE: do i have a virus?
+1 wipe it and move on, you'll waste far less time. John W. Cook Systems Administrator Partnership For Strong Families 315 SE 2nd Ave Gainesville, Fl 32601 Office (352) 393-2741 x320 Cell (352) 215-6944 Fax (352) 393-2746 MCSE, MCTS, MCP+I,CompTIA A+, N+ From: Lee Douglas [mailto:[EMAIL PROTECTED] Sent: Wednesday, October 22, 2008 9:23 AM To: NT System Admin Issues Subject: Re: do i have a virus? Having spent days fiddling with a machine to fix a problem that I knew was going to require a format and re-install, I second the recommendation that you just scrub it and re-install. If it has any personal information on it, including credit cards or bank info, all the more reason to do it. Check out diescum if you wish to continue to fool with the machine, but you are very likely to be just fooling yourself that you can fix it. On Wed, Oct 22, 2008 at 9:15 AM, Jon Harris [EMAIL PROTECTED]mailto:[EMAIL PROTECTED] wrote: Blow it and rebuild why are you wasting your time? Jon On Wed, Oct 22, 2008 at 9:05 AM, Miguel Gonzalez [EMAIL PROTECTED]mailto:[EMAIL PROTECTED] wrote: I'm trying for now with Kaspersky online scanner and TrendMicro online scanner. Unfortunately I get a warning when i try to install any AV saying that the sysadmin (I'm the sysadmin!) policies don't let me to install this software. Kaspersky is at 80% and have found several trojans... Miguel --- El mié, 22/10/08, Martin Blackstone [EMAIL PROTECTED]mailto:[EMAIL PROTECTED] escribió: De: Martin Blackstone [EMAIL PROTECTED]mailto:[EMAIL PROTECTED] Asunto: RE: do i have a virus? Para: NT System Admin Issues ntsysadmin@lyris.sunbelt-software.commailto:ntsysadmin@lyris.sunbelt-software.com Fecha: miércoles, 22 octubre, 2008 9:00 Drop the zero and get with the hero! -Original Message- From: Webster [mailto:[EMAIL PROTECTED]mailto:[EMAIL PROTECTED]] Sent: Wednesday, October 22, 2008 5:13 AM To: NT System Admin Issues Subject: RE: do i have a virus? -Original Message- From: Miguel Gonzalez [mailto:[EMAIL PROTECTED]mailto:[EMAIL PROTECTED]] Subject: do i have a virus? Two days ago our printers disappeared from our windows xp machine. After trying to add them again, we got an error that we couldn't run because printer spooler is not running. When I went to start the printer spooler, I got an error saying that it couldn't be run (error 1804). After googling a bit, some people said that we could have viruses on the machine. We have symantec installed, and after scanning we got some viruses that were quarantined. We tried to uninstall Symantec and install McAfee but now we get an error saying that the windows installer cannot be run. Microsoft recommends reregister the windows installer (which we have done) and if it doesn't work, rename dlls and the windows installer and install it again. Since I don't trust very much this reinstall of the windows installer as a solution, anyone can give me any hint of what might be happening or we should check beforehand? I know this doesn't answer your question - UT - dump McCrappy and Symantec and try Vipre. Webster ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ CONFIDENTIALITY STATEMENT: The information transmitted, or contained or attached to or with this Notice is intended only for the person or entity to which it is addressed and may contain Protected Health Information (PHI), confidential and/or privileged material. Any review, transmission, dissemination, or other use of, and taking any action in reliance upon this information by persons or entities other than the intended recipient without the express written consent of the sender are prohibited. This information may be protected by the Health Insurance Portability and Accountability Act of 1996 (HIPAA), and other Federal and Florida laws. Improper or unauthorized use or disclosure of this information could result in civil and/or criminal penalties. Consider the environment. Please don't print this e-mail unless you really need to. ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~
RE: do i have a virus?
+2. Unless you think an issue is one you might see repeatedly on multiple systems (where finding the root issue will pay dividends later), a wipe and re-OS is quicker. OTOH I have seen re-applying an OS service pack fix some weird print spooler issues. I'd shoot a post to www.experts-exchange.comhttp://www.experts-exchange.com too. David Lum // SYSTEMS ENGINEER NORTHWEST EVALUATION ASSOCIATION (Desk) 971.222.1025 // (Cell) 503.267.9764 From: John Cook [mailto:[EMAIL PROTECTED] Sent: Wednesday, October 22, 2008 6:25 AM To: NT System Admin Issues Subject: RE: do i have a virus? +1 wipe it and move on, you'll waste far less time. John W. Cook Systems Administrator Partnership For Strong Families 315 SE 2nd Ave Gainesville, Fl 32601 Office (352) 393-2741 x320 Cell (352) 215-6944 Fax (352) 393-2746 MCSE, MCTS, MCP+I,CompTIA A+, N+ From: Lee Douglas [mailto:[EMAIL PROTECTED] Sent: Wednesday, October 22, 2008 9:23 AM To: NT System Admin Issues Subject: Re: do i have a virus? Having spent days fiddling with a machine to fix a problem that I knew was going to require a format and re-install, I second the recommendation that you just scrub it and re-install. If it has any personal information on it, including credit cards or bank info, all the more reason to do it. Check out diescum if you wish to continue to fool with the machine, but you are very likely to be just fooling yourself that you can fix it. On Wed, Oct 22, 2008 at 9:15 AM, Jon Harris [EMAIL PROTECTED]mailto:[EMAIL PROTECTED] wrote: Blow it and rebuild why are you wasting your time? Jon On Wed, Oct 22, 2008 at 9:05 AM, Miguel Gonzalez [EMAIL PROTECTED]mailto:[EMAIL PROTECTED] wrote: I'm trying for now with Kaspersky online scanner and TrendMicro online scanner. Unfortunately I get a warning when i try to install any AV saying that the sysadmin (I'm the sysadmin!) policies don't let me to install this software. Kaspersky is at 80% and have found several trojans... Miguel --- El mié, 22/10/08, Martin Blackstone [EMAIL PROTECTED]mailto:[EMAIL PROTECTED] escribió: De: Martin Blackstone [EMAIL PROTECTED]mailto:[EMAIL PROTECTED] Asunto: RE: do i have a virus? Para: NT System Admin Issues ntsysadmin@lyris.sunbelt-software.commailto:ntsysadmin@lyris.sunbelt-software.com Fecha: miércoles, 22 octubre, 2008 9:00 Drop the zero and get with the hero! -Original Message- From: Webster [mailto:[EMAIL PROTECTED]mailto:[EMAIL PROTECTED]] Sent: Wednesday, October 22, 2008 5:13 AM To: NT System Admin Issues Subject: RE: do i have a virus? -Original Message- From: Miguel Gonzalez [mailto:[EMAIL PROTECTED]mailto:[EMAIL PROTECTED]] Subject: do i have a virus? Two days ago our printers disappeared from our windows xp machine. After trying to add them again, we got an error that we couldn't run because printer spooler is not running. When I went to start the printer spooler, I got an error saying that it couldn't be run (error 1804). After googling a bit, some people said that we could have viruses on the machine. We have symantec installed, and after scanning we got some viruses that were quarantined. We tried to uninstall Symantec and install McAfee but now we get an error saying that the windows installer cannot be run. Microsoft recommends reregister the windows installer (which we have done) and if it doesn't work, rename dlls and the windows installer and install it again. Since I don't trust very much this reinstall of the windows installer as a solution, anyone can give me any hint of what might be happening or we should check beforehand? I know this doesn't answer your question - UT - dump McCrappy and Symantec and try Vipre. Webster ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ CONFIDENTIALITY STATEMENT: The information transmitted, or contained or attached to or with this Notice is intended only for the person or entity to which it is addressed and may contain Protected Health Information (PHI), confidential and/or privileged material. Any review, transmission, dissemination, or other use of, and taking any action in reliance upon this information by persons or entities other than the intended recipient without the express written consent of the sender are prohibited. This information may be protected by the Health Insurance Portability and Accountability Act of 1996 (HIPAA), and other Federal and Florida laws. Improper or unauthorized use or disclosure of this information could result in civil and/or criminal penalties. Consider
RE: do i have a virus?
Go to infectedornot.com and run their free scanner . Todd -Original Message- From: Webster [mailto:[EMAIL PROTECTED] Sent: Wednesday, October 22, 2008 8:13 AM To: NT System Admin Issues Subject: RE: do i have a virus? -Original Message- From: Miguel Gonzalez [mailto:[EMAIL PROTECTED] Subject: do i have a virus? Two days ago our printers disappeared from our windows xp machine. After trying to add them again, we got an error that we couldn't run because printer spooler is not running. When I went to start the printer spooler, I got an error saying that it couldn't be run (error 1804). After googling a bit, some people said that we could have viruses on the machine. We have symantec installed, and after scanning we got some viruses that were quarantined. We tried to uninstall Symantec and install McAfee but now we get an error saying that the windows installer cannot be run. Microsoft recommends reregister the windows installer (which we have done) and if it doesn't work, rename dlls and the windows installer and install it again. Since I don't trust very much this reinstall of the windows installer as a solution, anyone can give me any hint of what might be happening or we should check beforehand? I know this doesn't answer your question - UT - dump McCrappy and Symantec and try Vipre. Webster ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~
RE: do i have a virus?
Ok, I'm finding some suspicious cookies and some trojans. However, after cleaning up with some of this free tools I can't still add a printer, restart the printer spooler or the windows installer service. Since this machine has automatic windows updates, I'm fearing that a windows update could have triggered this issue. And answering the people, I need to know what has happened to avoid this could spread to other computers in the network. Thanks, Miguel --- El mié, 22/10/08, Todd Lemmiksoo [EMAIL PROTECTED] escribió: De: Todd Lemmiksoo [EMAIL PROTECTED] Asunto: RE: do i have a virus? Para: NT System Admin Issues ntsysadmin@lyris.sunbelt-software.com Fecha: miércoles, 22 octubre, 2008 10:40 Go to infectedornot.com and run their free scanner . Todd -Original Message- From: Webster [mailto:[EMAIL PROTECTED] Sent: Wednesday, October 22, 2008 8:13 AM To: NT System Admin Issues Subject: RE: do i have a virus? -Original Message- From: Miguel Gonzalez [mailto:[EMAIL PROTECTED] Subject: do i have a virus? Two days ago our printers disappeared from our windows xp machine. After trying to add them again, we got an error that we couldn't run because printer spooler is not running. When I went to start the printer spooler, I got an error saying that it couldn't be run (error 1804). After googling a bit, some people said that we could have viruses on the machine. We have symantec installed, and after scanning we got some viruses that were quarantined. We tried to uninstall Symantec and install McAfee but now we get an error saying that the windows installer cannot be run. Microsoft recommends reregister the windows installer (which we have done) and if it doesn't work, rename dlls and the windows installer and install it again. Since I don't trust very much this reinstall of the windows installer as a solution, anyone can give me any hint of what might be happening or we should check beforehand? I know this doesn't answer your question - UT - dump McCrappy and Symantec and try Vipre. Webster ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~
RE: do i have a virus?
Cleanspl.exe: Spooler Cleaner? http://www.microsoft.com/downloads/details.aspx?FamilyID=9d467a69-57ff-4ae7-96ee-b18c4790cffdDisplayLang=en Will work with XP. From this site: http://members.shaw.ca/bsanders/CleanPrinterDrivers.htm -Original Message- From: Miguel Gonzalez [mailto:[EMAIL PROTECTED] Sent: Wednesday, October 22, 2008 10:47 AM To: NT System Admin Issues Subject: RE: do i have a virus? Ok, I'm finding some suspicious cookies and some trojans. However, after cleaning up with some of this free tools I can't still add a printer, restart the printer spooler or the windows installer service. Since this machine has automatic windows updates, I'm fearing that a windows update could have triggered this issue. And answering the people, I need to know what has happened to avoid this could spread to other computers in the network. Thanks, Miguel --- El mié, 22/10/08, Todd Lemmiksoo [EMAIL PROTECTED] escribió: De: Todd Lemmiksoo [EMAIL PROTECTED] Asunto: RE: do i have a virus? Para: NT System Admin Issues ntsysadmin@lyris.sunbelt-software.com Fecha: miércoles, 22 octubre, 2008 10:40 Go to infectedornot.com and run their free scanner . Todd -Original Message- From: Webster [mailto:[EMAIL PROTECTED] Sent: Wednesday, October 22, 2008 8:13 AM To: NT System Admin Issues Subject: RE: do i have a virus? -Original Message- From: Miguel Gonzalez [mailto:[EMAIL PROTECTED] Subject: do i have a virus? Two days ago our printers disappeared from our windows xp machine. After trying to add them again, we got an error that we couldn't run because printer spooler is not running. When I went to start the printer spooler, I got an error saying that it couldn't be run (error 1804). After googling a bit, some people said that we could have viruses on the machine. We have symantec installed, and after scanning we got some viruses that were quarantined. We tried to uninstall Symantec and install McAfee but now we get an error saying that the windows installer cannot be run. Microsoft recommends reregister the windows installer (which we have done) and if it doesn't work, rename dlls and the windows installer and install it again. Since I don't trust very much this reinstall of the windows installer as a solution, anyone can give me any hint of what might be happening or we should check beforehand? I know this doesn't answer your question - UT - dump McCrappy and Symantec and try Vipre. Webster ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~
RE: do i have a virus?
What has happened, as you've already reported, there were several Trojans on the computer. Your symptoms aren't consistent with trouble reported from installing Windows updates. They are consistent with being infected. No matter how many antivirus programs you run, there's a chance you'll still be infected by something not detected. Follow the advice already given, boot an installation CD and format the system partition. That will help avoid the problem spreading to other computers. And make sure all other computers are up to date for Windows Updates and 3rd party software updates (run the Secunia online inspector). Carl -Original Message- From: Miguel Gonzalez [mailto:[EMAIL PROTECTED] Sent: Wednesday, October 22, 2008 11:47 AM To: NT System Admin Issues Subject: RE: do i have a virus? Ok, I'm finding some suspicious cookies and some trojans. However, after cleaning up with some of this free tools I can't still add a printer, restart the printer spooler or the windows installer service. Since this machine has automatic windows updates, I'm fearing that a windows update could have triggered this issue. And answering the people, I need to know what has happened to avoid this could spread to other computers in the network. Thanks, Miguel --- El mié, 22/10/08, Todd Lemmiksoo [EMAIL PROTECTED] escribió: De: Todd Lemmiksoo [EMAIL PROTECTED] Asunto: RE: do i have a virus? Para: NT System Admin Issues ntsysadmin@lyris.sunbelt-software.com Fecha: miércoles, 22 octubre, 2008 10:40 Go to infectedornot.com and run their free scanner . Todd -Original Message- From: Webster [mailto:[EMAIL PROTECTED] Sent: Wednesday, October 22, 2008 8:13 AM To: NT System Admin Issues Subject: RE: do i have a virus? -Original Message- From: Miguel Gonzalez [mailto:[EMAIL PROTECTED] Subject: do i have a virus? Two days ago our printers disappeared from our windows xp machine. After trying to add them again, we got an error that we couldn't run because printer spooler is not running. When I went to start the printer spooler, I got an error saying that it couldn't be run (error 1804). After googling a bit, some people said that we could have viruses on the machine. We have symantec installed, and after scanning we got some viruses that were quarantined. We tried to uninstall Symantec and install McAfee but now we get an error saying that the windows installer cannot be run. Microsoft recommends reregister the windows installer (which we have done) and if it doesn't work, rename dlls and the windows installer and install it again. Since I don't trust very much this reinstall of the windows installer as a solution, anyone can give me any hint of what might be happening or we should check beforehand? I know this doesn't answer your question - UT - dump McCrappy and Symantec and try Vipre. Webster ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~
RE: do i have a virus?
+2 But will add find out why the virus's got there in the first place. Even if you remove them all that won't get you to how they got in. You need to find the how. -Original Message- From: Sam Cayze [mailto:[EMAIL PROTECTED] Sent: Wednesday, October 22, 2008 12:18 PM To: NT System Admin Issues Subject: RE: do i have a virus? +1 -Original Message- From: Carl Houseman [mailto:[EMAIL PROTECTED] Sent: Wednesday, October 22, 2008 11:07 AM To: NT System Admin Issues Subject: RE: do i have a virus? What has happened, as you've already reported, there were several Trojans on the computer. Your symptoms aren't consistent with trouble reported from installing Windows updates. They are consistent with being infected. No matter how many antivirus programs you run, there's a chance you'll still be infected by something not detected. Follow the advice already given, boot an installation CD and format the system partition. That will help avoid the problem spreading to other computers. And make sure all other computers are up to date for Windows Updates and 3rd party software updates (run the Secunia online inspector). Carl -Original Message- From: Miguel Gonzalez [mailto:[EMAIL PROTECTED] Sent: Wednesday, October 22, 2008 11:47 AM To: NT System Admin Issues Subject: RE: do i have a virus? Ok, I'm finding some suspicious cookies and some trojans. However, after cleaning up with some of this free tools I can't still add a printer, restart the printer spooler or the windows installer service. Since this machine has automatic windows updates, I'm fearing that a windows update could have triggered this issue. And answering the people, I need to know what has happened to avoid this could spread to other computers in the network. Thanks, Miguel --- El mié, 22/10/08, Todd Lemmiksoo [EMAIL PROTECTED] escribió: De: Todd Lemmiksoo [EMAIL PROTECTED] Asunto: RE: do i have a virus? Para: NT System Admin Issues [EMAIL PROTECTED] software.com Fecha: miércoles, 22 octubre, 2008 10:40 Go to infectedornot.com and run their free scanner . Todd -Original Message- From: Webster [mailto:[EMAIL PROTECTED] Sent: Wednesday, October 22, 2008 8:13 AM To: NT System Admin Issues Subject: RE: do i have a virus? -Original Message- From: Miguel Gonzalez [mailto:[EMAIL PROTECTED] Subject: do i have a virus? Two days ago our printers disappeared from our windows xp machine. After trying to add them again, we got an error that we couldn't run because printer spooler is not running. When I went to start the printer spooler, I got an error saying that it couldn't be run (error 1804). After googling a bit, some people said that we could have viruses on the machine. We have symantec installed, and after scanning we got some viruses that were quarantined. We tried to uninstall Symantec and install McAfee but now we get an error saying that the windows installer cannot be run. Microsoft recommends reregister the windows installer (which we have done) and if it doesn't work, rename dlls and the windows installer and install it again. Since I don't trust very much this reinstall of the windows installer as a solution, anyone can give me any hint of what might be happening or we should check beforehand? I know this doesn't answer your question - UT - dump McCrappy and Symantec and try Vipre. Webster ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~
Re: do i have a virus?
As several others have pointed out, you are going to waste a great deal of time going around in ever diminishing circles. I understand the need to find the cause/source of the malware but set yourself a time limit to clean the system and stick to it. If you don't succeed, wipe the disk. If you do find the infection causing the problem and subsequently understand the infection vector, still wipe the disk. Before you reach your limit, try a different approach. Much malware is loaded using rootkit techniques and is resistant to common anti-virus detection. Try this program; it has saved me many hours of frustration: http://greatis.com/unhackme/download.htm or direct download: http://www.greatissoftware.com/unhackme.zip -Original Message- From: Miguel Gonzalez [mailto:[EMAIL PROTECTED] Sent: Wednesday, October 22, 2008 11:47 AM To: NT System Admin Issues Subject: RE: do i have a virus? Ok, I'm finding some suspicious cookies and some trojans. However, after cleaning up with some of this free tools I can't still add a printer, restart the printer spooler or the windows installer service. Since this machine has automatic windows updates, I'm fearing that a windows update could have triggered this issue. And answering the people, I need to know what has happened to avoid this could spread to other computers in the network. Thanks, Miguel --- El mié, 22/10/08, Todd Lemmiksoo [EMAIL PROTECTED] escribió: De: Todd Lemmiksoo [EMAIL PROTECTED] Asunto: RE: do i have a virus? Para: NT System Admin Issues ntsysadmin@lyris.sunbelt-software.com Fecha: miércoles, 22 octubre, 2008 10:40 Go to infectedornot.com and run their free scanner . Todd -Original Message- From: Webster [mailto:[EMAIL PROTECTED] Sent: Wednesday, October 22, 2008 8:13 AM To: NT System Admin Issues Subject: RE: do i have a virus? -Original Message- From: Miguel Gonzalez [mailto:[EMAIL PROTECTED] Subject: do i have a virus? Two days ago our printers disappeared from our windows xp machine. After trying to add them again, we got an error that we couldn't run because printer spooler is not running. When I went to start the printer spooler, I got an error saying that it couldn't be run (error 1804). After googling a bit, some people said that we could have viruses on the machine. We have symantec installed, and after scanning we got some viruses that were quarantined. We tried to uninstall Symantec and install McAfee but now we get an error saying that the windows installer cannot be run. Microsoft recommends reregister the windows installer (which we have done) and if it doesn't work, rename dlls and the windows installer and install it again. Since I don't trust very much this reinstall of the windows installer as a solution, anyone can give me any hint of what might be happening or we should check beforehand? I know this doesn't answer your question - UT - dump McCrappy and Symantec and try Vipre. Webster ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~
