Virus

[VARN]

I had a computer running XP IE6 The only protection on it was Norton 2004. It has xp anti virus 2008 and some others, Trojan downloaders mostly. I removed Norton, I scanned it with Ad aware, Spybot, AVG, and Dr.Web CureIt, fixed some Hijack this items. Malware Bytes Anti Malware would not install, SDFix would install, but I kept receiving stop errors when trying to reboot in safe mode. After all this, the antiviral web sites are still blocked through direct access and updates. The only online scanner I could access was panda scan but IE would not display the information bar to download the activeX controls I ran Process Explorer, there was not any unknown process to end I did ipconfig /flushdns. I tried portable IE7 and Portable firefox on a USB both would not work. I checked the HOST file and it is the same as if it were a new install. The computer is now gone but I wanted to know, what other methods the virus could use to block these specific sites.

[Sbrideau]

I remember Devnull saying the virus changed something somewhere in the registry (is it?) to redirect/block sites, maybe that's what's happening.. Let's wait for him.

[JoeDaStudd]

Heres a simply work around.

 

Install ClamAV on a flash drive and run it directly from the flash drive.

 

If this fails I would recommend reformatting and reinstalling the OS

[D. V. Devnull]

I remember Devnull saying the virus changed something somewhere in the registry (is it?) to redirect/block sites, maybe that's what's happening.. Let's wait for him.

Actually, it would have been the hosts file, unless IE's sites listings had been messed with and/or the properties for the network connection and its' modules. However, having read all the damage that VARN mentioned, I would say that whatever got on his PC managed to reach all the way to the TCP/IP stack. Further, that it was designed to avoid messing with most of the usual places, thereby defeating any and all kinds of normal defense against it. :geek:

 

 

 

Only one chance of recovering that old PC remains, if it happens (Note: VARN did say that it was no longer around, but I'm just being an optimist in the current context...) to be sitting in a back corner somewhere... Eset's NOD32 AntiVirus... that is, if VARN could even reach http://www.eset.com and download (and install) the application. :?

 

 

 

Man, I'm so glad that I'm such a propeller-head that I can't ever end up with these kinds of problems. :ohnoes:

 

 

 

~D. V. "That old PC may be really [bleep]ed." Devnull