thanks, well I tried to keep the mesage short as advised. But I have Norton
security, and I didn't know the auto protect was off, on now of course. I've
completed 2 full scans since Sunday with Norton and it shows no virus
present, nothing to repair, etc. I have since found on the Norton threat
explorer that a low risk Trojan was discovered on 5/25/08, this is the new
bit for me, I think I can follow removal instructions but if the scan didn't
flag up any problem could trojan still be present? This was the only forum I
wanted to ask , sorry I maybe don't have the correct language but I am
grateful for help,
Hidecote
"Malke" wrote:
> hidecote wrote:
>
> > sorry forgot to say I have used my anti virus to scan my computer for
> > threats. It shows ok. Can I assume my computer has kept the virus out?
> >
> > "hidecote" wrote:
> >
> >> on 5/25/08, suddenly got lots of threat alerts, checked anti virus etc
> >> think
> >> it may have been disabled, don't know why. But system logs etc, now
> >> warnings, e.g. rule "default block Bla Trojan horse" blocked (my
> >> address).
> >> "your address has disappeared no longer protected" "port block allow
> >> Netbios changed" Tried Netstat showing 7-8 no waiting. Looking at logs
> >> first strange entries around 5/15/08
> >> I am novice, never seen this before,need advice, scared.
> >> thanks, hidecote,
>
> Your post is very confusing since you didn't say from where you're getting
> the threat alerts, which antivirus you're using, and what makes you think
> it has been disabled. You should definitely make sure the machine is clean
> by going through some scanning. I'll give you the steps below but since you
> say you're a computer novice a better choice might be to take the machine
> to a professional computer repair shop. Don't use your local equivalent of
> BigComputerStore/GeekSquad. Get recommendations from family, friends, and
> colleagues instead.
>
> Go through these general malware removal steps systematically -
>
http://www.elephantboycomputers.com/page2....emoving_Malware
>
> Include scanning with David Lipman's Multi_AV and follow instructions to do
> all scans in Safe Mode. Please see the special Notes regarding using
> Multi_AV in Vista.
>
>
http://www.elephantboycomputers.com/page2.html#Multi-AV - instructions
>
http://tinyurl.com/yoeru3 - download link and more instructions
>
> When all else fails, get guided help. Choose one of the specialty forums
> listed at the first link. Register and read its posting FAQ. You will
> generally be asked to:
>
> 1. Download and execute HiJack This! (HJT) -
>
http://www.trendsecure.com/portal/en-US/th.../HJTInstall.exe
>
> 2. Disable Notepad's word wrap - In Notepad.exe Format --> uncheck "Word
> wrap"
>
> 3. Download/run Deckard's System Scanner -
>
http://www.techsupportforum.com/sectools/Deckard/dss.exe
>
> 4. Save the scan results (Main.txt and Extra.txt)
>
> 5. And then post the contents of Main.txt and Extra.txt in your post at the
> forum you chose. DO NOT POST LOGS IN THE MS NEWSGROUPS.
>
> Standard disclaimer: I can't see and test your computer myself, so these are
> just suggestions based on many years of being a professional computer tech
> suggestions based on what you've written. You should not take my
> suggestions as a definitive diagnosis. If you can't do the work yourself
> (and there is no shame in admitting this isn't your cup of tea), take the
> machine to a professional computer repair shop (not your local equivalent
> of BigComputerStore/GeekSquad). Please be aware that not all local shops
> are skilled at removing malware and even if they are, your computer may be
> so infested that Windows will need to be clean-installed. If possible, have
> all your data backed up before you take the machine into a shop.
>
> Malke
> --
> MS-MVP
> Elephant Boy Computers
>
www.elephantboycomputers.com
> Don't Panic!
>