Pinging Dr. Lippman & others - So I ran Multi-AV and...

[betty889125@hotrmailnospam.org]

Trend and Sophos found no viruses on my system partition, although Sophos
did mention when used in safe mode:

Aborted checking: "OE\Data\Sent Items.dbx - appears to be a 'zip bomb'"


McAfee and Kaspersky stalled on the database folders in Outlook Express and
Thunderbird, respectively, so I exited the program and couldn't run those
two yet. I may just run them on the Winnt system directory. I stopped
McAfee because it appeared that each dbx file was taking an hour to scan in
safe mode (they're quite large database files). I'm going to have use
McAfee to scan one directory at a time.

I've just run Sophos, Mcafee (aborted) and Kaspersky (mode) in safe mode.
I'm going to run them in full boot mode later.


Hopefully the keylogger described in a previous post is completely gone (by
using Regseeker and Reglite and deleting all instances of it in the
registry).


Other questions:

1) Should I download a trial version of AVG and use that once as a check?
2) Will I need a Rootkit revealer and Kaspersky removal tool to see if
Kaspersky attached an attribute to my files, as someone previously posted?

3) This link you have for the bootdisk NTFS4DOS seems to be outdated:

http://www.datapol-technologies.com/dpe/freeware/

Can you recommend another site? I was going to create the 4 disk set, but
I was wondering if I could just use an emergency repair disk to boot up,
and then just use the c:\cd AV-ClS command and run the bat file.

[David H. Lipman]

From: <betty889125@hotrmailnospam.org>

Dr. Lippman ? It is dave {BTW: My last name is lipman :-) }

| Trend and Sophos found no viruses on my system partition, although Sophos
| did mention when used in safe mode:
|
| Aborted checking: "OE\Data\Sent Items.dbx - appears to be a 'zip bomb'"


It considers large databases and compressed files and "Zip Bombs" and can be ignored. There
is a NEW switch parameter I can implement that I can use to avoid this message,


|
| McAfee and Kaspersky stalled on the database folders in Outlook Express and
| Thunderbird, respectively, so I exited the program and couldn't run those
| two yet. I may just run them on the Winnt system directory. I stopped
| McAfee because it appeared that each dbx file was taking an hour to scan in
| safe mode (they're quite large database files). I'm going to have use
| McAfee to scan one directory at a time.
|
| I've just run Sophos, Mcafee (aborted) and Kaspersky (mode) in safe mode.
| I'm going to run them in full boot mode later.


You have to have patience. Let it run over night.


|
| Hopefully the keylogger described in a previous post is completely gone (by
| using Regseeker and Reglite and deleting all instances of it in the
| registry).
|
| Other questions:
|
| 1) Should I download a trial version of AVG and use that once as a check?


AVG has a free version but I suggest AntiVir instead as a fully installed anti virus
application.


| 2) Will I need a Rootkit revealer and Kaspersky removal tool to see if
| Kaspersky attached an attribute to my files, as someone previously posted?


No. Use a RootKit remover like Gmer if and only if you know you have a Rooted Trojan.


|
| 3) This link you have for the bootdisk NTFS4DOS seems to be outdated:
|
| http://www.datapol-technologies.com/dpe/freeware/
|
| Can you recommend another site? I was going to create the 4 disk set, but
| I was wondering if I could just use an emergency repair disk to boot up,
| and then just use the c:\cd AV-ClS command and run the bat file.
|

There is apparnently a change to this URL. I look into this.

--
Dave
http://www.claymania.com/removal-trojan-adware.html
http://www.ik-cs.com/got-a-virus.htm