| Author
|
Please help virus........
|
cosmic gill
IsraTrance Junior Member
Started Topics :
22
Posts :
582
Posted : May 19, 2005 15:04
|
i have a virus on in computer can u help....
Virus name: Trojan.StartPage.M
File: C:WINDOWSSystem32celj.dll
Location : Quarantine.
please help
|
|
|
traveller
IsraTrance Senior Member
Started Topics :
234
Posts :
3803
Posted : May 19, 2005 15:53
|
technical details
When Trojan.StartPage.M is executed, it performs the following actions:
1. Drops the file %Temp%\se.dll.
Note: %Temp% is a variable that refers to the Windows temporary folder. By default, this is C:\Windows\TEMP (Windows 95/98/Me/XP) or C:\WINNT\Temp (Windows NT/2000).
2. Registers itself as a Browser Helper Object by creating and populating the following registry subkeys:
HKEY_CLASSES_ROOT\CLSID\{2862736E-7B27-418A-A4E8-F13FB2E8C945}
HKEY_CLASSES_ROOT\CLSID\{5607D0D5-3205-45F2-A125-63666696DDA0}
3. Adds the value:
"CLSID" = "{2862736E-7B27-418A-A4E8-F13FB2E8C945}"
to the registry subkeys:
HKEY_CLASSES_ROOT\PROTOCOLS\Filter\text/html
HKEY_CLASSES_ROOT\PROTOCOLS\Filter\text/plain
to register itself as a protocol filter. This enables the Trojan to modify content displayed in Internet Explorer.
4. Adds the value:
"sp" = "rundll32 %temp%\se.dll,DllInstall"
to the registry subkey:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run
so that it is executed every time Windows starts.
5. Adds the value:
"Search Bar" = "res://%temp%\se.dll/sp.htm;"
to the registry subkeys:
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main
HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Main
to modify the search settings in Internet Explorer.
6. Displays a Web page contained in se.dll, when Internet Explorer is started.
 "The dinosaurs became extinct because they didn't have a space program."
- Larry Niven |
|
|
|
traveller
IsraTrance Senior Member
Started Topics :
234
Posts :
3803
Posted : May 19, 2005 15:55
|
what antivirus software are you using?
"The dinosaurs became extinct because they didn't have a space program."
- Larry Niven |
|
|
|
NextWorld
IsraTrance Junior Member
Started Topics :
12
Posts :
397
Posted : May 19, 2005 21:56
|
probably not an actual one  |
|
|
|
full_on
IsraTrance Team
Started Topics :
279
Posts :
5475
Posted : May 19, 2005 22:37
|
You're using windows?
I recommend: format c: This always works. 
Respect!
.
...Be gentle with the earth...
...Dance like nobody's watching...
.
...I don't mind not going to Heaven, as long as they've got Coffee in Hell... |
|
|
|
traveller
IsraTrance Senior Member
Started Topics :
234
Posts :
3803
Posted : May 19, 2005 23:28
|
Quote:
|
On 2005-05-19 21:56, NextWorld wrote:
probably not an actual one
|
|
"The dinosaurs became extinct because they didn't have a space program."
- Larry Niven |
|
|
|
CLAW
CLAW
Started Topics :
117
Posts :
2738
Posted : May 20, 2005 02:13
|
1. Install and run Spy Bot S&D (free D/L)
2. Install and run Adaware SE (Personal Editon is free)
3. Install and run Microsoft Antivirus beta (www.microsoft.com also free)
4. Another usefull utility is HijackThis.exe.
(http://forums.tomcoyote.org/index.php?act=idx)
• Noize Conspiracy Records •
http://soundcloud.com/c-l-a-w
https://www.facebook.com/CLAW.cy |
|
|
|
traveller
IsraTrance Senior Member
Started Topics :
234
Posts :
3803
Posted : May 20, 2005 02:53
|
Quote:
|
On 2005-05-20 02:13, CHP wrote:
1. Install and run Spy Bot S&D (free D/L)
2. Install and run Adaware SE (Personal Editon is free)
3. Install and run Microsoft Antivirus beta (www.microsoft.com also free)
4. Another usefull utility is HijackThis.exe.
(http://forums.tomcoyote.org/index.php?act=idx)
|
|
anti spyware tools aren't anti virus tools..
"The dinosaurs became extinct because they didn't have a space program."
- Larry Niven |
|
|
|
full_on
IsraTrance Team
Started Topics :
279
Posts :
5475
Posted : May 20, 2005 05:53
|
Want a free anti-virus that works better than Norton and McAffee together AND also does not fill more space on disk than most virus?
Try AVAST:
http://www.avast.com/
Respect!
.
...Be gentle with the earth...
...Dance like nobody's watching...
.
...I don't mind not going to Heaven, as long as they've got Coffee in Hell... |
|
|
|
traveller
IsraTrance Senior Member
Started Topics :
234
Posts :
3803
Posted : May 20, 2005 13:27
|
i wouldn't settle for anything but f-secure..
"The dinosaurs became extinct because they didn't have a space program."
- Larry Niven |
|
|
|
kikola
IsraTrance Full Member
Started Topics :
93
Posts :
764
Posted : May 20, 2005 15:15
|
Quote:
|
On 2005-05-20 05:53, full_on wrote:
Want a free anti-virus that works better than Norton and McAffee together AND also does not fill more space on disk than most virus?
Try AVAST:
http://www.avast.com/
Respect!
|
|
yep in combination with www.serials.ws works even better  highly reccomended!!! and zone alarm too www.zonelabs.com |
|
|
|
NextWorld
IsraTrance Junior Member
Started Topics :
12
Posts :
397
Posted : May 20, 2005 20:00
|
Quote:
|
[...]
Location : Quarantine.
please help
|
|
Ok, seems like we all haven´t read his posting carefully...
As the Virus is in quarantine, there should be no problem...and his Anti Virus Software works fine...
|
|
|
|
Narcosis
Narcosis
Started Topics :
45
Posts :
618
Posted : May 23, 2005 01:18
|
|
Boot from safe mode find the file and delete it. I always do it this. respect
Trance Sound As A Medium Towards Mystical Experience... |
|
|
|
cosmic gill
IsraTrance Junior Member
Started Topics :
22
Posts :
582
Posted : Jun 26, 2005 22:14
|
Ommmmmmmmm 
thanx all i just fixed the problem thank y'all
BOOM SHIVA 
|
|
|
|
friedclyde
Started Topics :
5
Posts :
305
Posted : Jun 27, 2005 13:44
|
|
