Prev: Unknown program in process list
Next: controlfile.rb
From: Bob on 6 Apr 2006 17:56
I have acquired Win32:Adloader-S trojan from ?? where. None of my spyware
programs found it. Inquiring with a local Computer Tech. why my anti-virus
didn't work, he advised me to download AVAST anti-virus. It found it! Now,
I cannot get rid of it. Can anyone tell me where to go to delete this out
of my system?
thanks


From: David H. Lipman on 6 Apr 2006 18:28
From: "Bob" <roburt(a)grande.net>

| I have acquired Win32:Adloader-S trojan from ?? where. None of my spyware
| programs found it. Inquiring with a local Computer Tech. why my anti-virus
| didn't work, he advised me to download AVAST anti-virus. It found it! Now,
| I cannot get rid of it. Can anyone tell me where to go to delete this out
| of my system?
| thanks
|


Download MULTI_AV.EXE from the URL --
http://www.ik-cs.com/programs/virtools/Multi_AV.exe

To use this utility, perform the following...
Execute; Multi_AV.exe { Note: You must use the default folder C:\AV-CLS }
Choose; Unzip
Choose; Close

Execute; C:\AV-CLS\StartMenu.BAT
{ or Double-click on 'Start Menu' in C:\AV-CLS }

NOTE: You may have to disable your software FireWall or allow WGET.EXE to go through your
FireWall to allow it to download the needed AV vendor related files.

C:\AV-CLS\StartMenu.BAT -- { or Double-click on 'Start Menu' in C:\AV-CLS}
This will bring up the initial menu of choices and should be executed in Normal Mode.
This way all the components can be downloaded from each AV vendor's web site.
The choices are; Sophos, Trend, McAfee, Kaspersky, Exit this menu and Reboot the PC.

You can choose to go to each menu item and just download the needed files or you can
download the files and perform a scan in Normal Mode. Once you have downloaded the files
needed for each scanner you want to use, you should reboot the PC into Safe Mode [F8 key
during boot] and re-run the menu again and choose which scanner you want to run in Safe
Mode. It is suggested to run the scanners in both Safe Mode and Normal Mode.

When the menu is displayed hitting 'H' or 'h' will bring up a more comprehensive PDF help
file. http://www.ik-cs.com/multi-av.htm

Additional Instructions:
http://harrisonrj.home.comcast.net/step_by_step_pc_cleaning_process.htm#Step_3_%96_Getting_Help


* * * Please report back your results * * *


--
Dave
http://www.claymania.com/removal-trojan-adware.html
http://www.ik-cs.com/got-a-virus.htm


From: Bob on 7 Apr 2006 08:23
Thanks David. Will this virus attach, and travel thru email?


"David H. Lipman" <DLipman~nospam~@Verizon.Net> wrote in message
news:1CgZf.6100$Fr5.1463(a)trnddc04...
> From: "Bob" <roburt(a)grande.net>
>
> | I have acquired Win32:Adloader-S trojan from ?? where. None of my
> spyware
> | programs found it. Inquiring with a local Computer Tech. why my
> anti-virus
> | didn't work, he advised me to download AVAST anti-virus. It found it!
> Now,
> | I cannot get rid of it. Can anyone tell me where to go to delete this
> out
> | of my system?
> | thanks
> |
>
>
> Download MULTI_AV.EXE from the URL --
> http://www.ik-cs.com/programs/virtools/Multi_AV.exe
>
> To use this utility, perform the following...
> Execute; Multi_AV.exe { Note: You must use the default folder C:\AV-CLS }
> Choose; Unzip
> Choose; Close
>
> Execute; C:\AV-CLS\StartMenu.BAT
> { or Double-click on 'Start Menu' in C:\AV-CLS }
>
> NOTE: You may have to disable your software FireWall or allow WGET.EXE to
> go through your
> FireWall to allow it to download the needed AV vendor related files.
>
> C:\AV-CLS\StartMenu.BAT -- { or Double-click on 'Start Menu' in C:\AV-CLS}
> This will bring up the initial menu of choices and should be executed in
> Normal Mode.
> This way all the components can be downloaded from each AV vendor's web
> site.
> The choices are; Sophos, Trend, McAfee, Kaspersky, Exit this menu and
> Reboot the PC.
>
> You can choose to go to each menu item and just download the needed files
> or you can
> download the files and perform a scan in Normal Mode. Once you have
> downloaded the files
> needed for each scanner you want to use, you should reboot the PC into
> Safe Mode [F8 key
> during boot] and re-run the menu again and choose which scanner you want
> to run in Safe
> Mode. It is suggested to run the scanners in both Safe Mode and Normal
> Mode.
>
> When the menu is displayed hitting 'H' or 'h' will bring up a more
> comprehensive PDF help
> file. http://www.ik-cs.com/multi-av.htm
>
> Additional Instructions:
> http://harrisonrj.home.comcast.net/step_by_step_pc_cleaning_process.htm#Step_3_%96_Getting_Help
>
>
> * * * Please report back your results * * *
>
>
> --
> Dave
> http://www.claymania.com/removal-trojan-adware.html
> http://www.ik-cs.com/got-a-virus.htm
>
>


From: David H. Lipman on 7 Apr 2006 08:41
From: "Bob" <roburt(a)grande.net>

| Thanks David. Will this virus attach, and travel thru email?
|

It is not a virus.

Based upon the name; Win32:Adloader-S
I would say no. It is a Trojan and to a worm so it doesn't self replicate via email and the
name "adloader" implies it is in the malware class of "adware".

--
Dave
http://www.claymania.com/removal-trojan-adware.html
http://www.ik-cs.com/got-a-virus.htm


From: Bob on 7 Apr 2006 09:30
Thanks David. I just scanned my second computer and it was clean. I
use(ed) the Cox Internet Security Suite. I don't no whose AV they have
installed. Anyway, it was attached to My Cox AV, with a "prism.exe". It
was in the boot sector. It completely disabled the AV. I downloaded AVAST
AV, and it was the only one that detected it.
Only after deleting the Win32Adloader, with AVAST, and uninstalling the
Cox Security Suite it was removed.
I since have run several of the other well known online AV scanners and it's
now showing me as clean. Needless to say, Cox Internet Security Suite
didn't catch it coming in.


"Bob" <roburt(a)grande.net> wrote in message
news:123cmevn2h98229(a)corp.supernews.com...
> Thanks David. Will this virus attach, and travel thru email?
>
>
> "David H. Lipman" <DLipman~nospam~@Verizon.Net> wrote in message
> news:1CgZf.6100$Fr5.1463(a)trnddc04...
>> From: "Bob" <roburt(a)grande.net>
>>
>> | I have acquired Win32:Adloader-S trojan from ?? where. None of my
>> spyware
>> | programs found it. Inquiring with a local Computer Tech. why my
>> anti-virus
>> | didn't work, he advised me to download AVAST anti-virus. It found it!
>> Now,
>> | I cannot get rid of it. Can anyone tell me where to go to delete this
>> out
>> | of my system?
>> | thanks
>> |
>>
>>
>> Download MULTI_AV.EXE from the URL --
>> http://www.ik-cs.com/programs/virtools/Multi_AV.exe
>>
>> To use this utility, perform the following...
>> Execute; Multi_AV.exe { Note: You must use the default folder C:\AV-CLS }
>> Choose; Unzip
>> Choose; Close
>>
>> Execute; C:\AV-CLS\StartMenu.BAT
>> { or Double-click on 'Start Menu' in C:\AV-CLS }
>>
>> NOTE: You may have to disable your software FireWall or allow WGET.EXE to
>> go through your
>> FireWall to allow it to download the needed AV vendor related files.
>>
>> C:\AV-CLS\StartMenu.BAT -- { or Double-click on 'Start Menu' in
>> C:\AV-CLS}
>> This will bring up the initial menu of choices and should be executed in
>> Normal Mode.
>> This way all the components can be downloaded from each AV vendor's web
>> site.
>> The choices are; Sophos, Trend, McAfee, Kaspersky, Exit this menu and
>> Reboot the PC.
>>
>> You can choose to go to each menu item and just download the needed files
>> or you can
>> download the files and perform a scan in Normal Mode. Once you have
>> downloaded the files
>> needed for each scanner you want to use, you should reboot the PC into
>> Safe Mode [F8 key
>> during boot] and re-run the menu again and choose which scanner you want
>> to run in Safe
>> Mode. It is suggested to run the scanners in both Safe Mode and Normal
>> Mode.
>>
>> When the menu is displayed hitting 'H' or 'h' will bring up a more
>> comprehensive PDF help
>> file. http://www.ik-cs.com/multi-av.htm
>>
>> Additional Instructions:
>> http://harrisonrj.home.comcast.net/step_by_step_pc_cleaning_process.htm#Step_3_%96_Getting_Help
>>
>>
>> * * * Please report back your results * * *
>>
>>
>> --
>> Dave
>> http://www.claymania.com/removal-trojan-adware.html
>> http://www.ik-cs.com/got-a-virus.htm
>>
>>
>
>


 | 
Pages: 1
Prev: Unknown program in process list
Next: controlfile.rb