24 replies to this topic

[Denyse]

Can anyone help me, I appear to have picked up a w32/nachi.a work in my DLLHost.exe file.

I dowloaded the microsoft patch, and tried to use the fix from my security provider but it doesnt work. What is the DLLHost.exe file do anyway?

[Haystack]

Hi Denyse,
this should walk you through the process of straightening things out:
http://www.sophos.co.../w32nachia.html

Scroll to the bottom of the link for disinfection instructions.

[Denyse]

Thanks Haystack, I'm pretty desparate

[powerofeyes]

Hello,
Can anyone help I have a w32/lovesan(blaster virus) virus in the following folder.
C:\Program Files\Deerfield.com\VisNetic AntiVirus\Server\TFTP2136
It is still active even after quarantined by my virus scanner. I am unable to remove it. I read many instructions online on this virus removal but still cant remove it from my system. I used all microsoft patches and my system is not getting affected. But the virus scanner gives a warning often and rarely my sytem hangs. I also tried stopping net services to remove this virus it gives access denied warning and says the file is in USE.
What ever I try it gives "ACCESS DENIED" warning.
My system is a win2k standalone server.
can anyone help me.
thanks,
VIJAY.

[Haystack]

This should walk you through it, Vijay:
http://www.microsoft...s/msblaster.asp

[powerofeyes]

Hello Haystack,

http://www.microsoft...s/msblaster.asp

I have gone through this article so many times. My problem is not the virus affecting my system. I already used the required patch and the virus can no longer affect my system. But it is sitting in that particular quarantine folder of my antivirus software and is active. i just want to delete this file TFTP2136. When i try doing it gives a w32/lovesan virus warning. It say access denied. I dont know what to do,
VIJAY

[Haystack]

That's over my head, PowerOfEyes. It sounds like a good question for your antivirus company.

[YaSO]

If you don't have a router, get a router. It is very tricky to keep your machine safe from virus/worm if your machine is hooked up to the internet directly. Linksys should work fine, but you'd probably need to reboot it once in 2 weeks or so. If your budget allows, get a Cisco router; pretty expensive but you can go without rebooting it for a very long time.

[Jill]

YaSO, what's the purpose of rebooting the router every few weeks?

I have the linksys, but don't generally touch it unless something is wrong.

J

[YaSO]

I have the linksys, but don't generally touch it unless something is wrong.

I don't think it absolutely necessary to reboot the router; it depends how you are using it. But it is just not built to be able to run forever; that's all.

For personal use or SOHO type setup, probably linksys works just fine and may not need to reboot every so often.

[OldWelshGuy]

Power, have you tried re booting in safe mode, ? you may be able to deleat it then as pehaps it willnot be fully operational. I know very little about such things, but when i got paranoid about the contents of my virus vault thats what I was told to do, did, and cleaned it out.

[OldWelshGuy]

deleat??? dear oh dear and there was me looking right at the spell check button,

[qwerty]

I've always been curious about this. I understand that one of the options of virus scanning apps is to quarantine them, but I don't understand why people would choose to use it. Why not just have the program delete the infected item?

At any rate, if you can identify whatever process the viral object is running, you can probably stop that process in task manager and then delete it.

Also, if the problem is that your system is trying to protect you by refusing to put the item into the recycle bin, you can try SHIFT-DELETE.

[Jill]

I believe I've always had the option to delete items in the quarantine. I use Norton.

Jill

[Scottie]

I think you would want to quarantine items while you checked them out to be sure you wanted to delete them... it is possible for the virus-checkers to target programs you might actually want on your computer.