Re: W32.Sober.x is killing me

On Mon, 19 Dec 2005 19:19:40 GMT, "David H. Lipman"
<DLipman~nospam~@Verizon.Net> wrote:

>From: "I forget" <ye@xxxxxxx>
>
>
>|
>| Thank you for the reply. Do you actually feel that this might get rid
>| of Sober or are you just expressing your preference in programs? Thank
>| you!
>
>For one, having theree formally installed AV applications is contrindicated. Of the three
>NOD32 is best and F-Prot is number two.
>
>You have also indicated you have performed numerous scans using different utilties and AV
>vendors.
>
>Remove NAV and F-Prot and just keep NOD32.
>
>Just to be sure you don't have a Sober worm lingering around, you can use the Multi AV
>Scanning Tool which is not a formally installed AV application and thus won't interfer with
>NOD32 and will give you four different AV vendor scanners.
>
>Start with the Mcafee module.
>
>Download MULTI_AV.EXE from the URL --
>http://www.ik-cs.com/programs/virtools/Multi_AV.exe
>
>To use this utility, perform the following...
>Execute; Multi_AV.exe { Note: You must use the default folder C:\AV-CLS }
>Choose; Unzip
>Choose; Close
>
>Execute; C:\AV-CLS\StartMenu.BAT
>{ or Double-click on 'Start Menu' in C:\AV-CLS }
>
>NOTE: You may have to disable your software FireWall or allow WGET.EXE to go through your
>FireWall to allow it to download the needed AV vendor related files.
>
>C:\AV-CLS\StartMenu.BAT -- { or Double-click on 'Start Menu' in C:\AV-CLS}
>This will bring up the initial menu of choices and should be executed in Normal Mode.
>This way all the components can be downloaded from each AV vendor's web site.
>The choices are; Sophos, Trend, McAfee, Kaspersky, Exit this menu and Reboot the PC.
>
>You can choose to go to each menu item and just download the needed files or you can
>download the files and perform a scan in Normal Mode. Once you have downloaded the files
>needed for each scanner you want to use, you should reboot the PC into Safe Mode [F8 key
>during boot] and re-run the menu again and choose which scanner you want to run in Safe
>Mode. It is suggested to run the scanners in both Safe Mode and Normal Mode.
>
>When the menu is displayed hitting 'H' or 'h' will bring up a more comprehensive PDF help
>file. http://www.ik-cs.com/multi-av.htm
>
>
>* * * Please report back your results * * *

Hello, David, normally I would trim the original post, but your
information is so great that I cannot. :)

First of all, before I downloaded your great program, I saw that NOD32
gave me some path info I hadn't seen from the other AV apps. I deleted
a bunch of Temp Internet Files that were still present in spite of my
supposedly deleting them numerous times via IE, which brought my CPU
cyles down from 100% to 1% and Symantec's infected alerts stopped
coming.

I downloaded your package and updated all programs. McAfee would not
run in either Normal or Safe mode, but I ran Sophos, Trend, and
Kapersky in Normal Mode, then rebooted to Safe Mode and ran them all
again. I rebooted and Symantec went nuts, alerting me constantly about
infections. Interestingly, these infections were all in a Symantec
Application Data folder. I removed Symantec Corp 10 (whihch took about
10 minutes!) and rebooted and the machine is running like it should
be.

This seems like an odd sequence of events, but both NOD32 and F-Prot
say I am clean.

Question: Ziff-Davis used to be my source of knowledge and they
advocated running two or three AV programs, which you do not, saying
it is "contrindicated". I don't know this word, but Merriam-Webster
says that contraindicate (different spelling) means "inadvisable".
Presuming this is what you meant, can you point me to something saying
this? I have never heard that and am not sure how to Google it.

Suggestion: When I right-click and drag on Multi_AV.exe, one of my
options is to extract it to C:\Multi_AV, as oppposed to C:\AV-CLS as
required. Do you get my drift?

Also, please look for an email with the subject line, "Multi_AV". You
will be glad you did.
.

Relevant Pages

  • Re: Massive problem with Windows 2000 and my computer
    ... Reboot your system when ... After doing so, download ... > I went into safe mode and removed all of the "Windows Hot ... presumably because I touched the windows updates. ...
    (microsoft.public.win2000.general)
  • Re: pop up across desktop
    ... Thanks, Steve T. ... download it and upgrade immediately then press Scan Your Computer button ... in normal mode; found 7 infections and cleaned them ... It did not find anything in Safe Mode after. ...
    (microsoft.public.windowsxp.general)
  • Re: wininet.dll problem
    ... FireWall to allow it to download the needed AV vendor related files. ... This will bring up the initial menu of choices and should be executed in Normal Mode. ... Sophos, Trend, McAfee, Kaspersky, Exit this menu and Reboot the PC. ... It is suggested to run the scanners in both Safe Mode and Normal Mode. ...
    (microsoft.public.windowsxp.general)
  • Re: MDMS.EXE
    ... FireWall to allow it to download the needed AV vendor related files. ... This will bring up the initial menu of choices and should be executed in Normal Mode. ... Sophos, Trend, McAfee, Kaspersky, Exit this menu and Reboot the PC. ... needed for each scanner you want to use, you should reboot the PC into Safe Mode [F8 key ...
    (microsoft.public.security.virus)
  • Re: eTrust AV giving different info
    ... FireWall to allow it to download the needed AV vendor related files. ... This will bring up the initial menu of choices and should be executed in Normal Mode. ... Sophos, Trend, McAfee, Kaspersky, Exit this menu and Reboot the PC. ... It is suggested to run the scanners in both Safe Mode and Normal Mode. ...
    (alt.comp.anti-virus)