Computing.Net > Forums > Security and Virus > email virus from, he11

email virus from, he11

Reply to Message Icon

Original Message
Name: ulaoulao
Date: August 22, 2006 at 04:54:22 Pacific
Subject: email virus from, he11
OS: win xp sp2
CPU/Ram: 1 gig
Model/Manufacturer: custom
Comment:

Ok, this is a good one. My ISP drops me do to a email virus I cant even find. I run a scan new virus defs, and tried scanning with Norton, Avast! and f-prot. Nothing found... I get a few tools to search for Trojans, and find a few things clean them up and call my ISP and I'm back on line. Then all is well. 3 weeks later I decide to reinstall windows do to other issues. I also used a new HD, the old drive was taken out. The day after I get a call from my ISP. I run a scan and nothing found.

ok two things

1) one I have a bios resident virus.
2) its a port that I closed and reinstalling windows opened it back up. and this virus was in a file I had reused.

Either way HOW DO I FIND THIS THING.. EatherEal sees no smtp activity, but my ISP does. There is no router involved here. My ISP verified it was coming form the mac address that is the card of the suggested computer.


Report Offensive Message For Removal

Response Number 1
Name: XpUser4Real
Date: August 22, 2006 at 08:41:29 Pacific
Subject: email virus from, he11
Reply: (edit)

One thing you could try is to D/L Avast. Then disable your AV and let avast do a bootscan on reboot. If there is something in the bios, it should help to remove it for you. Just make sure to click move it to the chest for all found.

Hopefully my advice will help you...Please post back with your results....thanks


Report Offensive Follow Up For Removal

Response Number 2
Name: ulaoulao
Date: August 22, 2006 at 10:46:20 Pacific
Subject: email virus from, he11
Reply: (edit)

I could not get avast! to do a scan on boot, Ill search for that option again,currently it is the only virus checker installed.


Report Offensive Follow Up For Removal

Response Number 3
Name: XpUser4Real
Date: August 22, 2006 at 10:56:14 Pacific
Subject: email virus from, he11
Reply: (edit)

unuistall avast and reinstall it. That should give you the option for a boot scan on reboot

Hopefully my advice will help you...Please post back with your results....thanks


Report Offensive Follow Up For Removal

Response Number 4
Name: ulaoulao
Date: August 22, 2006 at 11:57:45 Pacific
Subject: email virus from, he11
Reply: (edit)

ahh thats right it did ask that.. Will do thx for your help.


Report Offensive Follow Up For Removal

Response Number 5
Name: ulaoulao
Date: August 22, 2006 at 18:52:57 Pacific
Subject: email virus from, he11
Reply: (edit)

I did scan but all I found was a few files that had ranky-ru. They are gone now, but no avidence that they where running. The reg keys didnt exist. I'm behind a linux box now, so I wont be attacked, I would just love to find a virus checker that can find this thing.


Report Offensive Follow Up For Removal







Use following form to reply to current message:

   Name: From My Computing.Net Settings
 E-Mail: From My Computing.Net Settings

Subject: email virus from, he11

Comments:

 


  Homepage URL (*): 
Homepage Title (*): 
         Image URL: 
 
Data Recovery Software