baaad virus

[Guest ice-g]

i have located a virus in my pc but McAffee won t put it in quarentine

its a file in the system 32 map named ctfmon (or somethin)

if anybody knows what i should or can do (exept resetting my pc) .. please

reply thank you

[Guest Malke]

ice-g wrote:

<span style="color:blue">

> i have located a virus in my pc but McAffee won t put it in quarentine

> its a file in the system 32 map named ctfmon (or somethin)

> if anybody knows what i should or can do (exept resetting my pc) .. please

> reply thank you</span>

 

Since you haven't provided any details, all I can do is give you the general

steps to remove viruses and malware:

 

Go through these general malware removal steps systematically -

http://www.elephantboycomputers.com/page2....emoving_Malware

 

Include scanning with David Lipman's Multi_AV and follow instructions to do

all scans in Safe Mode. Please see the special Notes regarding using

Multi_AV in Vista.

 

http://www.elephantboycomputers.com/page2.html#Multi-AV - instructions

http://tinyurl.com/yoeru3 - download link and more instructions

 

You can also check to see if there are targeted removal steps for your

malware here:

Bleeping Computer removal how-to's -

http://www.bleepingcomputer.com/forums/forum55.html

 

When all else fails, get guided help. Choose one of the specialty forums

listed at the first link. Register and read its posting FAQ. PLEASE DO NOT

POST LOGS IN THE MS NEWSGROUPS.

 

Standard disclaimer: I can't see and test your computer myself, so these are

just suggestions based on many years of being a professional computer tech;

suggestions based on what you've written. You should not take my

suggestions as a definitive diagnosis. If you can't do the work yourself

(and there is no shame in admitting this isn't your cup of tea), take the

machine to a professional computer repair shop (not your local equivalent

of BigComputerStore/GeekSquad). Please be aware that not all local shops

are skilled at removing malware and even if they are, your computer may be

so infested that Windows will need to be clean-installed. If possible, have

all your data backed up before you take the machine into a shop.

 

Malke

--

MS-MVP

Elephant Boy Computers - Don't Panic!

FAQ - http://www.elephantboycomputers.com/#FAQ

[Guest ÃÂûõúÑÂðýôр]

Use DrWeb, Luke.

http://www.drweb.com/?lng=en

 

"ice-g" <ice-g@discussions.microsoft.com> ÑÂþþñщøû(ð) ò ýþòþÑÂÑ‚ÑÂÑ…

ÑÂûõôующõõ:D4E8999A-3F5E-4DDE-9BC7-1FBA00A0DF03@microsoft.com...<span style="color:blue">

> i have located a virus in my pc but McAffee won t put it in quarentine

> its a file in the system 32 map named ctfmon (or somethin)

> if anybody knows what i should or can do (exept resetting my pc) .. please

> reply thank you </span>

[Guest David H. Lipman]

From: "ice-g" <ice-g@discussions.microsoft.com>

 

| i have located a virus in my pc but McAffee won t put it in quarentine

| its a file in the system 32 map named ctfmon (or somethin)

| if anybody knows what i should or can do (exept resetting my pc) .. please

| reply thank you

 

Any directions would have to be generic. You left out what is important such as the fully

qualified name and path to the affected file as well as malware name McAfee defined it as.

 

Download MULTI_AV.EXE from the URL --

http://www.pctipp.ch/ds/28400/28470/Multi_AV.exe

 

http://www.pctipp.ch/downloads/dl/35905.asp

 

English:

http://www.raymond.cc/blog/archives/2008/0...virus-for-free/

 

To use this utility, perform the following...

Execute; Multi_AV.exe { Note: You must use the default folder C:\AV-CLS }

Choose; Unzip

Choose; Close

 

Execute; C:\AV-CLS\StartMenu.BAT

{ or Double-click on 'Start Menu' in C:\AV-CLS }

 

NOTE: You may have to disable your software FireWall or allow WGET.EXE to go through your

FireWall to allow it to download the needed AV vendor related files.

 

C:\AV-CLS\StartMenu.BAT -- { or Double-click on 'Start Menu' in C:\AV-CLS}

This will bring up the initial menu of choices and should be executed in Normal Mode.

This way all the components can be downloaded from each AV vendor's web site.

The choices are; Sophos, Trend, McAfee, Kaspersky, Exit this menu and Reboot the PC.

 

You can choose to go to each menu item and just download the needed files or you can

download the files and perform a scan in Normal Mode. Once you have downloaded the files

needed for each scanner you want to use, you should reboot the PC into Safe Mode [F8 key

during boot] and re-run the menu again and choose which scanner you want to run in Safe

Mode. It is suggested to run the scanners in both Safe Mode and Normal Mode.

 

When the menu is displayed hitting 'H' or 'h' will bring up a more comprehensive PDF help

file.

 

Additional Instructions:

http://pcdid.com/Multi_AV.htm

 

 

Please report back your results

 

--

Dave

http://www.claymania.com/removal-trojan-adware.html

Multi-AV - http://www.pctipp.ch/downloads/dl/35905.asp