Computing.Net > Forums > Windows 2000 > Virus trouble... HELP!!!

Computer Problems? Computing.Net has over 1,000,000 posts about all things technology related! Over 90% answered within 24 hours! Click here to start participating now! Also, be sure to check out the New User Guide.

Virus trouble... HELP!!!

Reply to Message Icon

Name: silverandblack
Date: March 2, 2004 at 13:03:41 Pacific
OS: 2000 professional
CPU/Ram: ?? 28.6GB??
Comment:

I'm visiting my parents and I found that they have at least three antivirus programs running... AVG, Bullguard, Trend Micro and maybe more... I ran AVG and I got the following report of viruses... I HAVE NO IDEA WHAT TO DO... PLEASE HELP!!!!

Results of Complete Test, date and time 3/2/2004 13:14:13 :

Testing C:\ serial A4DA-C217
C:\Documents and Settings\TcComputers\NTUSER.DAT Cannot open; not checked!
C:\Documents and Settings\TcComputers\ntuser.dat.LOG Cannot open; not checked!
C:\Documents and Settings\TcComputers\Local Settings\Application Data\Microsoft\WINDOWS\USRCLASS.DAT Cannot open; not checked!
C:\Documents and Settings\TcComputers\Local Settings\Application Data\Microsoft\WINDOWS\UsrClass.dat.LOG Cannot open; not checked!
C:\Documents and Settings\TcComputers\Local Settings\TEMP\ACR99.TMP Cannot open; not checked!
C:\Program Files\BullGuard\INFECTED\OCXDLL.EXE:\dll32.hlp Trojan horse IRC/BackDoor.Flood
C:\Program Files\BullGuard\INFECTED\OCXDLL.EXE:\dll32NT.hlp Trojan horse IRC/BackDoor.Flood
C:\Program Files\BullGuard\INFECTED\OCXDLL.EXE:\gg.bat Trojan horse IRC/BackDoor.Flood
C:\Program Files\BullGuard\INFECTED\OCXDLL.EXE:\httpsear.ini Trojan horse IRC/BackDoor.Flood
C:\Program Files\BullGuard\INFECTED\OCXDLL.EXE:\mdm.exe Trojan horse HideWindow
C:\Program Files\BullGuard\INFECTED\OCXDLL.EXE:\NT32.ini Trojan horse IRC/BackDoor.Flood
C:\Program Files\BullGuard\INFECTED\OCXDLL.EXE:\xvpll.hlp Trojan horse IRC/BackDoor.Flood
C:\Program Files\BullGuard\INFECTED\VSC0.TMP Cannot open; not checked!
C:\Program Files\BullGuard\INFECTED\VSC7.TMP Cannot open; not checked!
C:\WINNT\SMDAT32A.SYS Cannot open; not checked!
C:\WINNT\SYSTEM32\OCXDLL.EXE:\dll32.hlp Trojan horse IRC/BackDoor.Flood
C:\WINNT\SYSTEM32\OCXDLL.EXE:\dll32NT.hlp Trojan horse IRC/BackDoor.Flood
C:\WINNT\SYSTEM32\OCXDLL.EXE:\gg.bat Trojan horse IRC/BackDoor.Flood
C:\WINNT\SYSTEM32\OCXDLL.EXE:\httpsear.ini Trojan horse IRC/BackDoor.Flood
C:\WINNT\SYSTEM32\OCXDLL.EXE:\mdm.exe Trojan horse HideWindow
C:\WINNT\SYSTEM32\OCXDLL.EXE:\NT32.ini Trojan horse IRC/BackDoor.Flood
C:\WINNT\SYSTEM32\OCXDLL.EXE:\xvpll.hlp Trojan horse IRC/BackDoor.Flood
C:\WINNT\SYSTEM32\P2P Networking\CACHE\DATABASE\INDEX256.DBB Cannot open; not checked!
C:\WINNT\TEMP\TMP1 repaired

Test finished, duration 00:20:41.2 s
13309 objects tested, 15 found infected



Sponsored Link
Ads by Google

Response Number 1
Name: Jennifer SUMN
Date: March 2, 2004 at 16:05:02 Pacific
Reply:

First of all, it's not a good idea to run more than one anti-virus program on a machine.

The machine is infected with BackDoor.IRC.flood

Removal instructions for that here:

http://securityresponse.symantec.com/avcenter/venc/data/backdoor.irc.flood.html

There may be other virii that aren't being detected because of the number of antivirus programs installed.

Symantec has a free 15-day trial that you can download and install.

It would also be a good idea to run the Security check from the Symantec site, AND if your parents aren't using the IRC software (probably mIRC) uninstall that as well.

Good luck...


0

Response Number 2
Name: silverandblack
Date: March 2, 2004 at 16:42:27 Pacific
Reply:

Thanx so much... now one more question... why do different antivirus programs detect different viruses and how come it isn't of value to run more than one program?? Can it harm the system??


0

Response Number 3
Name: gian2oo1
Date: March 2, 2004 at 18:38:56 Pacific
Reply:

1) Some programs detect different viruses for multiple reasons:

--a) Some are rarely updated
--b) Some simply weren't built well

Trust something well-known that is updated frequently like Norton or McAffe.

2) I don't think running more than one anti-virus will harm the system, but it might cause minor errors. Remember anti-virus programs are complex and use odd parts of the system. An anti-virus might think another anti-virus is actually a virus itself, especially if it trys to connect to the internet for an update.

I suggest to download Norton as Jen said--Log off the Inet--Uninstall all your anti-virus programs--Install norton and have it clean everything.

Good luck silver,

~~GianSpi


0

Sponsored Link
Ads by Google
Reply to Message Icon

Related Posts

See More







Post Locked

This post is quite old and has been locked from receiving new replies. Please create a new posting instead.


Go to Windows 2000 Forum Home


Sponsored links

Ads by Google


Results for: Virus trouble... HELP!!!

troj virus PLEASE HELP NORVICE www.computing.net/answers/windows-2000/troj-virus-please-help-norvice/20324.html

Still can't clear the virus! Pls help me www.computing.net/answers/windows-2000/still-cant-clear-the-virus-pls-help-me/30737.html

Urgent! Undeletable virus!Pls help www.computing.net/answers/windows-2000/urgent-undeletable-viruspls-help/30751.html