Windows XP Virus
in [Windows XP]
|
Prev: repair windows xp from a secondary instance of windows?
Next: Prevent users from saving music and pictures to their hard drives without folder redirection?
From: MowGreen on 10 Mar 2010 17:45 C wrote: > Eric wrote: >> We've encountered a virus on one of our windows xp professional >> machines. It locks the computer up at random intervals. We've cleaned >> the computer using multiple different anti-viruses which fixes the >> problem for a time, however the virus always comes back within a day. >> We've used anti-rootkits and found nothing as well. >> It also seems to only lock the computer up if it is connected with the >> ethernet cable. >> Any suggestions would be greatly appreciated. > > Try removing all the system restore points after doing another malware > clean up as malware can hang out in there. > Let's end this misconception, misunderstanding, or miscomprehension - *** Malware in System Restore can *NOT* infect a clean OS and is *not* active unless a restore point that includes it is used *** Period !!! MowGreen ================ *-343-* FDNY Never Forgotten ================ banthecheck.com "Security updates should *never* have *non-security content* prechecked
From: C on 10 Mar 2010 19:07 MowGreen wrote: > C wrote: >> Eric wrote: >>> We've encountered a virus on one of our windows xp professional >>> machines. It locks the computer up at random intervals. We've cleaned >>> the computer using multiple different anti-viruses which fixes the >>> problem for a time, however the virus always comes back within a day. >>> We've used anti-rootkits and found nothing as well. >>> It also seems to only lock the computer up if it is connected with the >>> ethernet cable. >>> Any suggestions would be greatly appreciated. >> >> Try removing all the system restore points after doing another malware >> clean up as malware can hang out in there. >> > > Let's end this misconception, misunderstanding, or miscomprehension - > > *** Malware in System Restore can *NOT* infect a clean OS and is *not* > active unless a restore point that includes it is used *** > Period !!! > > MowGreen That hasn't been my experience. -- C
From: Ken Blake, MVP on 10 Mar 2010 20:09 On Thu, 11 Mar 2010 01:07:36 +0100, C <c(a)nospamers.com.invalid> wrote: > MowGreen wrote: > > C wrote: > >> Eric wrote: > >>> We've encountered a virus on one of our windows xp professional > >>> machines. It locks the computer up at random intervals. We've cleaned > >>> the computer using multiple different anti-viruses which fixes the > >>> problem for a time, however the virus always comes back within a day. > >>> We've used anti-rootkits and found nothing as well. > >>> It also seems to only lock the computer up if it is connected with the > >>> ethernet cable. > >>> Any suggestions would be greatly appreciated. > >> > >> Try removing all the system restore points after doing another malware > >> clean up as malware can hang out in there. > >> > > > > Let's end this misconception, misunderstanding, or miscomprehension - > > > > *** Malware in System Restore can *NOT* infect a clean OS and is *not* > > active unless a restore point that includes it is used *** > > Period !!! > > > > MowGreen > > > That hasn't been my experience. There is no question about it. What MowGreen says is absolutely correct. You are mistaken about your experience. -- Ken Blake, Microsoft MVP (Windows Desktop Experience) since 2003 Please Reply to the Newsgroup
From: Ronin on 10 Mar 2010 20:13 You have diagnosed an infection that absolutely, positively came from a SR restore point? You're absolutely certain that it didn't come from elsewhere? Do you mind sharing the information necessary to repeat the issue? I am perfectly able and eager to do so, and I have all the necessary equipment (i.e., a spare machine that I use for experimentation and a fair amount of experience analyzing system behavior.) Perhaps you can at least identify the virus? The more specific the better. Seriously, I can't imagine any way for something to execute itself from inside a SR restore point, but if it can be done I want to know all about it. -- Ronin "C" <c(a)nospamers.com.invalid> wrote in message news:hn9c8b$e5k$1(a)speranza.aioe.org... > MowGreen wrote: >> C wrote: >>> Eric wrote: >>>> We've encountered a virus on one of our windows xp professional >>>> machines. It locks the computer up at random intervals. We've cleaned >>>> the computer using multiple different anti-viruses which fixes the >>>> problem for a time, however the virus always comes back within a day. >>>> We've used anti-rootkits and found nothing as well. >>>> It also seems to only lock the computer up if it is connected with the >>>> ethernet cable. >>>> Any suggestions would be greatly appreciated. >>> >>> Try removing all the system restore points after doing another malware >>> clean up as malware can hang out in there. >>> >> >> Let's end this misconception, misunderstanding, or miscomprehension - >> >> *** Malware in System Restore can *NOT* infect a clean OS and is *not* >> active unless a restore point that includes it is used *** >> Period !!! >> >> MowGreen > > > That hasn't been my experience. > > -- > C
From: Jose on 10 Mar 2010 20:17
On Mar 10, 4:53 pm, EN59CVH <EN59...(a)discussions.microsoft.com> wrote: > Perhaps it is not the virus at all. Windows XP system does act funny > from time to time for no apparent reasons. The only way to clear this > anomaly is to reformat the HD, re-install XP and all applications and > you are done. Please backup any user data before formatting your HD > because you are not likely to get them back after the format process. > > hth > > > > Eric wrote: > > > We've encountered a virus on one of our windows xp professional machines. It > > locks the computer up at random intervals. We've cleaned the computer using > > multiple different anti-viruses which fixes the problem for a time, however > > the virus always comes back within a day. We've used anti-rootkits and found > > nothing as well. > > > It also seems to only lock the computer up if it is connected with the > > ethernet cable. > > > Any suggestions would be greatly appreciated. My systems do not act funny and if I ever see one that is acting funny, it won't be for long. |