-
January 16th, 2008, 02:32 PM
#1
Virus keeps returning :)
Hey all
Client using Panda Antivirus - it keeps finding trj/Rizalof.RG - disinfecting it as it should however it comes back now and again. He has turned off system restore and on again a few times so I ruled that out as a possibility.
Anyone know how to permanent delete this one
Googled it however nothing solid.
Thanks.
The world is a dangerous place to live; not because of the people who are evil, but because of the people who don't do anything about it.
Albert Einstein
-
January 16th, 2008, 03:52 PM
#2
It would seem to me that if it keeps comming back after an AV program has removed it, one of his floppy/CD's or files on external drive is infected. I would recommend scanning all insertable media your client has.
LOGIN: yes
PASSWORD: I dont have one
"Login Failed"
-
January 16th, 2008, 04:17 PM
#3
Barring an infected thumbdrive, floppy, or disc. Try unhackme. http://www.greatis.com/unhackme/download.htm
Just don't ever use it on a server. Not a good thing.
Mankind have a great aversion to intellectual labor; but even supposing knowledge to be easily attainable, more people would be content to be ignorant than would take even a little trouble to acquire it.
- Samuel Johnson
-
January 17th, 2008, 07:58 AM
#4
Oliver's Law:
Experience is something you don't get until just after you need it.
-
January 17th, 2008, 08:19 AM
#5
Ok - thanks guys. I will try everything ...
The world is a dangerous place to live; not because of the people who are evil, but because of the people who don't do anything about it.
Albert Einstein
-
January 17th, 2008, 08:44 AM
#6
so he has a trojan...
First I would make sure that it isn't picking up something false, this particular trojan consumes internet bandwidth, won't allow registry editor to open, and displays false error msgs, etc... so check and see if these symptoms occur.
Next, do a full scan using a couple different scanners including the one that he/she is using currently (all in safe mode, like previously stated) then remove it from the _restore folder http://www.pandasecurity.com/homeuse...a=particulares
restart the machine and run the machine like normal... do the scan.
if the scanner reports a single file is corrupted and it is not a necessary file, delete it in safe mode...
Good Luck.
-
January 17th, 2008, 10:48 PM
#7
Using a operating system that is not affected by viruses could be a option.
Computers do not have problems, they have users.
~Cope57
-
January 17th, 2008, 10:59 PM
#8
lol... yeah, change to the infamous Vista, that particular trojan doesn't effect the Vista OS...
-
January 17th, 2008, 11:24 PM
#9
Hmmm, I think that ArPaNET has an interesting point:
First I would make sure that it isn't picking up something false, this particular trojan consumes internet bandwidth, won't allow registry editor to open, and displays false error msgs, etc... so check and see if these symptoms occur.
http://www.emsisoft.com/en/software/free/
Is a tool I would consider using. It scans for all sorts of malware and in particular it looks for "traces" as well as the full-blown article. Not all anti-malware get rid of these "traces" so you keep getting warned, but aren't really infected.
-
January 18th, 2008, 08:45 AM
#10
Is a tool I would consider using. It scans for all sorts of malware and in particular it looks for "traces" as well as the full-blown article. Not all anti-malware get rid of these "traces" so you keep getting warned, but aren't really infected.
I will check it out - thanks Nihil.
lol... yeah, change to the infamous Vista, that particular trojan doesn't effect the Vista OS..
So Vista has some really GOOD points.
Thanks for all the replies ...
The world is a dangerous place to live; not because of the people who are evil, but because of the people who don't do anything about it.
Albert Einstein
Similar Threads
-
By E5C4P3 in forum AntiVirus Discussions
Replies: 12
Last Post: April 30th, 2013, 08:05 PM
-
By Spyder32 in forum The Security Tutorials Forum
Replies: 18
Last Post: September 3rd, 2004, 11:23 PM
-
By foxdie in forum AntiVirus Discussions
Replies: 11
Last Post: April 4th, 2004, 02:52 AM
-
By ahmedmamuda in forum AntiVirus Discussions
Replies: 2
Last Post: March 20th, 2002, 02:03 AM
-
By 3ntropy in forum AntiOnline's General Chit Chat
Replies: 10
Last Post: March 4th, 2002, 11:32 PM
Posting Permissions
- You may not post new threads
- You may not post replies
- You may not post attachments
- You may not edit your posts
-
Forum Rules
|
|