24 replies to this topic

[powerofeyes]

Hello Everybody,
Thanks for all your advice I tried everything but none are working. I tried in dos mode and also in safe mode it just says action denied. It is not allowing me to delete the virus.
I feel this virus is using the file SMS.exe but I cant stop the process of the sms.exe file. When i try it through task manager it says action denied file is in use.
But the good thing is my system is not getting affected but rare occasions I get a w32/lovsan virus warning and my system hangs.
i used to delete all the other viruses in the quarantine folder i don't know what kind of stupid virus scanner is this it is just keeping the virus active in its own folder. I use norton, pccillin for my other win 2k professional system for the server I bought this deerfield.com product but this is one stupid virus scanner.
One possible chance I want to try is to remove the virus scanner and try I don't know even that works out,
thanks,
VIJAY

[powerofeyes]

Hello,
And modertor qwerty's answer, I quarantined because it didn't allow me to delete. Usually when a file is in use you cant delete but you have the option to quarantine that is what I did.
That file was in use when i scanned my system and still active. When we use this patch(patch file) it cant affect my system. But problem it is not affecting, but stays active. My system is always on the net and there is always a problem of this virus affecting others systems on the network from my system, It uses the port 135 to spread and RPC exploit discussed by the above bulletin of microsoft(link)
None of my other win2k systems are affected,
thanks
VIJAY.

[qwerty]

Isn't there a way to boot Windows in which it asks the user whether it should start each process? I can't remember how that's done, but I would think you could start the system without starting the infected app that way, and then you ought to be able to delete it.

I feel this virus is using the file SMS.exe but I cant stop the process of the sms.exe file. When i try it through task manager it says action denied file is in use.

When you're in the task manager, are you looking at the Applications tab, or the Processes tab? I think that in the processes tab you can stop something no matter what.

[Scottie]

Boot into safe mode so the infected files aren't loaded and "in use". Nasty viruses!

[powerofeyes]

Hello,
I tried booting both in dos mode and in safe mode both not working. And Mr qwerty ofcourse i tried only processes tab. SMS.exe is not an application but a system process.
thanks,
VIJAY

[OldWelshGuy]

My friend had this problem he put the entire sytem into a bath of hot water.... he never had a problem with it after that :-)

Although every time he tried to pull the plug on the bath he got a message saying glug glug glug that he swears was not there before

[qwerty]

Well, since everything runs ok, but you just can't get rid of this one file, I guess it becomes a question of whether you want to back up everything you've got, reformat the drive and reinstall the OS and all, or just live with it... or keep looking for a solution.

[powerofeyes]

So old wesley guy,
You want my win2k server system to be drowned in a bucket of water.
VIJAY.

[powerofeyes]

Hello Mr qwerty,
I have that option too. But one more option is to remove the visnetic virus scanner and see, since the virus is not affecting my LAN network and my server I an really reluctant to do it. But I dont know how many systems on the WAN network are getting affected of the active virus in my system. I am not going to worry about it anymore,

VIJAY

[YaSO]

Those of you who want to save $20 - 30 for anti-virus software but are always threatened by viruses and worms, I recommend AVG Anti-Virus http://www.grisoft.com/. It's 100% free and it works just fine.

All you have to do is register yourself by giving an actual email address (any email address); you will get a serial number. You download it and install it.

It might not have as many features as Norton or McAfee does, but I believe AVG is sufficient for most (Windows) users.