Urgent help please.....

Author
Discussion

funkyboogalooo

Original Poster:

1,844 posts

274 months

Monday 3rd June 2002
quotequote all
iv'e got a virus and its stopping me run ANY antivirus software. Any one got any suggestions?

Roadrunner

2,690 posts

273 months

Monday 3rd June 2002
quotequote all
panic

Leithen

11,918 posts

273 months

Monday 3rd June 2002
quotequote all
Does your virus software have a "magic bullet" emergency floppy disk creation utility? If so try to update your virus definition files and then create the floppy which you then reboot with....... that's the theory at least.....

moleamol

15,887 posts

269 months

Monday 3rd June 2002
quotequote all
You need to get a copy of a virus checker that runs from DOS. Boot your computer from a boot disk so that it runs in DOS mode. This will mean that the version of DOS it is using is clean. Install virus checker, use virus checker, that will sort the little blighter out. And Robert's your fathers brother.

F-prot will sort you out with one. Just do a web search for it.

ultimapaul

3,940 posts

270 months

Monday 3rd June 2002
quotequote all
If memory serves me correctly ...... Exit to DOS then type..

formatC: Then unplug the screen, keyboard, mouse etc. Pick up PC take it outside & dispose of into nearest pre '85 Skoda, Lada or FSU aka a skip! or just try

Only joking ...... Good luck.

Oh, by the way, how did you become infected by the virus

Cathelijne

170 posts

274 months

Monday 3rd June 2002
quotequote all
You can try (several) on-line virusscans.

One of them is:
http://security1.norton.com/ssc/home.asp?j=1&langid=us&venid=sym&plfid=20&pkj=DCQQORVWHFHMFNZMBBX

If you wish I can copy more url's of on-line virusscans.

tvradict

3,829 posts

280 months

Tuesday 4th June 2002
quotequote all
format C: ?

Seriously though, I'd second the DOS Virus Scanner idea!

Good Luck!

funkyboogalooo

Original Poster:

1,844 posts

274 months

Tuesday 4th June 2002
quotequote all
sorted , thanks for your efforts.

Roadrunner

2,690 posts

273 months

Tuesday 4th June 2002
quotequote all
anytime

ultimapaul

3,940 posts

270 months

Tuesday 4th June 2002
quotequote all
Funky, how was your PC infected?

Marshy

2,748 posts

290 months

Tuesday 4th June 2002
quotequote all
This sounds like one of the Klez virus variants. See any of the anti-virus vendor web sites for removal instructions. If it's Klez, the stuff on the Norton site tells you how to spot what it is, and how to remove it.

sipow

14,700 posts

273 months

Tuesday 4th June 2002
quotequote all
Funky,

Glad i didnt open that mail u sent me apparently with the attachment.
I believe some of these very common klez viruses mail eveyone in your address book to each other and completly tie your pc up.
Believe norton do a simple program that cleans your pc of this virus ,as u cant load any antivirus software with the pc allready being infected.

All the best

Simon

JonRB

75,727 posts

278 months

Tuesday 4th June 2002
quotequote all
quote:
iv'e got a virus and its stopping me run ANY antivirus software. Any one got any suggestions?
As already mentioned, this is almost certainly the Klez virus and it can be repaired with downloadable tools from Symantec (Norton) / McAfee / whoever.

DBD34

2 posts

269 months

Tuesday 4th June 2002
quotequote all
This was in the last issue of "P C World" magazine. It does work!

As you may know, when/if a worm virus gets into your computer it heads
straight for your email address book and sends itself
to everyone in there, thus infecting all your friends and associates.

This trick won't keep the virus from getting into your computer, but it
will stop it from using your address book to spread
further, and it will alert you to the fact that the worm has gotten into
your system.

Here's what you do:

First:
Open your address book and click on "new contact" or "new
person" just as you would do if you were adding a new friend to your
list of email addresses.

Second:
In the window where you would type your friend's FIRST name, type in:
!000 (that's an exclamation mark followed by 3
zeros).

In the window below where it prompts you to enter the new
email address, type in: WormAlert.

Third:
Then complete everything by clicking add, enter, OK, etc.

Now, here's what you've done and why it works: the "name"
!000 will be placed at the top of your address book as entry #1. This
will be where the worm will start in an effort to send itself
to all your friends.

But when it tries to send itself to !000, it will be undeliverable
because of the phony email address you entered (WormAlert). If the
first attempt fails (which it will because of the phony
address), the worm goes no further and your friends will not be
infected.

Here's the second great advantage of this method:
If an email cannot be delivered, you will be notified of this in
your In Box almost immediately.

Hence, if you ever get an email telling you that an email
addressed to WormAlert could not be delivered, you know right away that
you have the worm virus in your system. You can
then take steps to get rid of it.



ultimapaul

3,940 posts

270 months

Tuesday 4th June 2002
quotequote all
Cheers BDB34 !

Marshy

2,748 posts

290 months

Tuesday 4th June 2002
quotequote all
quote:
This was in the last issue of "P C World" magazine. It does work!


The caveat being "only against *some* worms".

Klez isn't one of those, because it has its own engine for sending e-mail out from your computer, thus avoiding Outlook/Outlook Express.

Good idea though, but mustn't be regarded as foolproof by any means.

Remember kids, splash out 40 quid on Norton, McAfee or whatever, and daily, or every time you connect to the internet, *update your virus signatures*. Do that before you check/download your e-mail.

Additionally, check regularly for patches from Microsoft for IE/Outlook/Outlook Express, and if there are new ones, apply them. Get on the microsoft security announcement mailing list so you know about patches as soon as they come out.

Do the above, and you'll be safer than most. I haven't had a computer virus in years.

funkyboogalooo

Original Poster:

1,844 posts

274 months

Tuesday 4th June 2002
quotequote all
yep was klez

wolosp

2,335 posts

271 months

Wednesday 5th June 2002
quotequote all
quote:

This was in the last issue of "P C World" magazine. It does work!

As you may know, when/if a worm virus gets into your computer it heads
straight for your email address book and sends itself
to everyone in there, thus infecting all your friends and associates. ....


I've had something similar to this in my address book for some time - you might like to create a second entry in the same manner - but call it a name beginning with Z - in case the virus starts at the last entry in your address book. So now you should have invalid addresses at the start and end of your address book.


>> Edited by wolosp on Wednesday 5th June 12:14

mdh

808 posts

270 months

Wednesday 5th June 2002
quotequote all
Sounds like the Klez virus.
If you have McAfee virus scan, get the latest DAT file from McAfee.com. Restart the PC in DOS mode.
Klez attacks the virus processes when Windows is running. You will be able to run the DOS scan and kill the virus.

If you are using a Mail program that has a preview window then turn this option off. Having the preview window opens the mail and infects you with the virus again.
Its a nasty little virus that takes e-mail addresses off the hard disk, sends itself on with another e-mail address in the from section, not necessarily yours.

For more details have a look at www.McAfee.com and do a search for Klez.