OT: [AccessD] Viruses

I ran into some virus last Xmas that rendered all exe files unexecutable.  I 
couldn't get cmd.exe running, or an anti virus or just about any program.  
You could start programs by opening a file that had an association to an exe 
so a .doc file would open Word.  I found a fix on the internet (which I got 
to by double clicking an htm file) but could not run the setup.exe.  I just 
renamed the extension to .com and it ran just fine and cleaned up the virus.

Hen


>From: "Jim Lawrence (AccessD)" <accessd at shaw.ca>
>Reply-To: Access Developers discussion and problem 
>solving<accessd at databaseadvisors.com>
>To: Access Developers discussion and problem solving 
><accessd at databaseadvisors.com>
>Subject: OT: [AccessD] Viruses
>Date: Sat, 20 Sep 2003 18:38:35 -0700
>
>Hi All:
>
>Seeing we are on the off topic subject of viruses I have one that I have
>been trying to remove.
>
>The client has an XP profession, formatted with NTFS. The worm is
>W32/Spybot-B and the key file to remove is in the system32 directory call
>tftp.exe. (What a time for their CDRom to fail.)
>
>I can not remove the file. It is locked in normal or safe mode. The worm
>process has removed access to command prompt in normal mode and it is 
>hidden
>and unacccessible from a Command boot disk. When checking the taskmanager,
>in safe mode, the file is not running but it still refuses to be deleted.
>(Note: cmd prompt, taskmanager, regedit and msconfig programs are render
>in-operative in normal mode.)
>
>The file is a particular problem as it will not allow any Windows Update to
>run because the update process locks when it hits this file. I have tried a
>variety of virus scanning and removal applications but they either ignore 
>it
>or fail when they hit this file.
>
>McAfees or Symantec do not even recognize this worm but Sophos Anti-Virus
>and Trend Micro  scan programs do.
>
>Any help would be greatly appreciated
>Jim
>
>
>
>_______________________________________________
>AccessD mailing list
>AccessD at databaseadvisors.com
>http://databaseadvisors.com/mailman/listinfo/accessd
>Website: http://www.databaseadvisors.com

_________________________________________________________________
MSN 8 with e-mail virus protection service: 2 months FREE*  
http://join.msn.com/?page=features/virus