Computer Viruses

I have had the same issues. Norton 2004 has no clue that it is in my system. I have done their remote scan, I have manually updated, everything says my system is clean in Norton...

Then I downloaded AVG, immediately it detects 2 Trojans: dowloader.lamedon.B and downloader.delf.2.AO

I tried to scan AVG in safemode, no luck, but the three times AVG has "healed" my computer the darn thing immeditatly tells me I have the lamedon virus again.

I have looked up all manual removal instructions for recent Trojans in both AVG and Norton, following Nortons was no help.

They system is not as cripled as it was before the AVG, but it is still not up and running. I am so mad cause I just got my new Mini IPod and I can't use it.

I too am experiencing exactly the same problem. Norton and p-cilin are unable to detect Lamedon.B. AGV does detect it and will clean but Lamedon.B reinstalls within minutes (this happens when both online and offline.

It appears in a file called dl.HTML which is located in the WINDOWS folder. I have deleted this file out of WINDOWS and trash probably 200 times. But, again, it reinstalls within minutes.

I ran the specific Lamedon.B scan from microtrend and this, too, was unable to detect it both when the dl.HTML file was in WINDOWS and after I had dewleted it.

I assume there must be a reinstaller buried deep within Windows somwwhere and would hugely appreciate any help or suggestions before resort to a sledge hammer to kill it!!!

I recently picked up this Trojan horse and believe that I have now removed it. I do not pretend to understand exactly what has worked.

I have a Win95 system, if that is relevant. AVG detected the Trojan horse, and said that it had cleaned it, but obviously it had not.

The only useful info about this Trojan horse that I could find on the internet was at Sophos (search for lamedon - throws up details of varieties A and F, which seem very similar to B) and Trend Micro (same search, and HTML_Lamedon.A info seemed the most relevant).

This info contains details of the various files and registry entries typically created by the Trojan horse. I just went through and deleted the files that I found that were mentioned (although many were simply not present).

For your information, the files I did find and delete/rename were dl.HTML and mstasks3.exe (both in Windows folder). The others, including the Registry entries, were not present. (If I had found them, I would have intended to delete other mstasks executables.)

But I believe the crucial piece of the jigsaw to be the file wintime.exe, that was in my Windows\System32 folder. I noticed that it was in the registry as running automatically each time Windows was started, and had a 'modified' date coinciding with the start of my problems with the Trojan Horse. I deleted this file and its reference in the Registry, and everything seems to be okay now (fingers crossed).

hello finaly i got a sulution taht worked for me.. the file named dl.HTML in windows what reaperes when u delete it can be removed i did it and it woked from me hope it wokes for u all to... now let me tell you how its easy just right click on the file select cut and then paste the file in c:\ then delete the file in c: and emty trash bin... that's all.. i think this works and don't realy know how but i think its something like this.. the file isin the wiindows regestry and got an auto backup function like important windows files and has high preority and cant be removed cause it always restores buy when u cut and paste it some other where it changes the regestry and sets it up to the new location and it wants to backup there but the reg file is linked to other files and they don't change cause they are not directly l9nked to the dl.HTML reg file just to the c.\windows\dl.HTML and theydont change and when they rty to restore the file the reg filr fot it that has been changed colides whit them and the whole process messes up and don't work so i think this will work try it it worked for me... :) have a nice day

hello i wrote earlier about taking the file away and i later found out that it don't work only for a while so i searched for a new idea and found out a way that will work for all... and almost easyer then the lastone... how to do... simply open wordpad and write the following text if u want you can just write whatever you want but i write this.. "i hate illegal trojans and som99 roxs" after that save the dokument and name it dl.HTML and sav it on the desctop after that cut the file and paste it to c:\windows and when it asks you to replace the infected dl.HTML just do it. now right click on it and click on propeties and now click on write protected and then ok now the file is write protected and the virust cant write a new dl.HTML if you don't know how to do email me and if you want my home made security patch that will be redy until monday just erite to me :) good night zzzzzzzzzz....

Thanks a lot som99! I've spend the last seven hours trying to find a solution. To everyone reading this, try som99's last solution, it works for me too. Once again, thanks big time, now I can finally go to sleep.

i also have had this problem with all the things you guys said but also i kept getting dl.HTML popping up as though it were a regulage web-page. this is despite having every pop-up stopper i could find all runnig at once (including, norton, yahoo, panicWARE, and ISP provided one and others) i tried som99's second method and it stopped the AVG message but dl.HTML still pops up if i leave my terminal for even 20mins i come back to over 20 of the windows with dl.HTML in them any help anyone can give for this second half of the problem would be great ~Tom

had that thing for 4 days...tried a number of things..what worked was updating the AVG database...the last one had been less that 14 days ago, but the current AVG finally worked..

I think the main problem was in the win file registery..don't know why I didn't delete that one

All Trojan horses are hidden files, in order to get at them you will need to go to the Files Option (click the View tab)at Control Panel and uncheck both the *Hide file extension for known file types & *Hide protected operating system files (Recommended)-boxes, then OK yourself out. Then you will need to restart your computer and go into SafeMode by HOLDING the F8 key DOWN -(at bootup - after the first screen info - be quick!) and choose SafeMode. [ You have to use your keyboard when you're in SafeMode - the keys to use are Ctrl/Alt/Delete (to exit the Help and Support screen) - Tab/Arrow keys/ Pageup/Pagedown/ the Window key(between Ctrl & Alt) & Enter] So, from the DeskTop screen press the Window key to get Start/ arrow up to Search/ arrow right to For Files or Folders and type up the NAME OF THE FILE & EXT (not horse.winshow.V) but the actual name of the file, which would have shown up on your anti-virus software. To delete this file from here just press Page Up to highlight the file and then delete. To get out of Search -Alt F/ arrow down to Close and press Enter. Press the Window key to shutdown and restart your computer.

It will be safe to empty your Recycle Bin in the Normal mode where you can use your mouse.

I have had 4 Trojan horses on my C drive and kinda figured out the above method a week ago. After unchecking the hidden files boxes I deleted the Temp file (as these keep putting the same files back into your system) from the _Restore folder , then went to SafeMode to delete what virus files that were still there. My computer is now absolutely FREE of these pests!

PS. I also have AVG 6.0 (the free one) & also the Ad-aware 6 and I use them every day as my kids love to play games from the Internet.

I use windows98 and I removed the file system32 and after that everything as been ok. I haven't had any problems, but I'm not sure if someone else can get problems doing this remove of the file.

KN is right. The easiest way is to go to grisoft.com and download either the trial version or the freeware version of AVG and click updates. When you get the one most recently released... you'll be FREE AT LAST!...FREE AT LAST!...Thank GOD ALMIGHTY...YOU'LL BE FREE AT LAST!

I think I got this one figured out, as most do already, been dealing with this for a week. Somehow not only this one but 10 to 10 others were automatically downloading onto the machine. The firs AVG run I did on June 2nd and it got rid of 15 viruses, all from the night before. This Lamedon.B one was never removed. So I went through downloaded a bunch of stuff and kept trying. Bullguard, spybot S&D, CWSredder, Ad-aware, Stinger, and PestPatrol never seen this virus. I updated AVG and it caught another 15 viruses (all downloader's). Only one file could not be erased and that was the C:\WINDOWS\system32\wintime.exe I went in safe mode and manually deleted this. AVG says things are clean, now we just wait and see..

hello all again i write about this Trojan...people tells me that they get the avg window disappears when they does my solution but the start page in internet explorer wont change its still the same... i got a solution for that to :P that worked for me and hopefully for you all out there too... before doing this backup your internet explorer original exe ... now delete the explorer links on your desktop and system tray and start menu or wherever u got it but don't delete the original exe in the explorer folder... now make new shortcuts from the explorer file in the program folder to all those places then right click and click on properties and where it stands "C:\Program\Internet Explorer\IEXPLORE.EXE" or what it stands on your computer this is from my Swedish windows i am Swedish :P :)) in that line write after the " thing write an internet address for example

"C:\Program\Internet Explorer\IEXPLORE.EXE" www.Google.com and then click ok now every time you open that shortcut from explorer it opens Google.com and this works for me.

Had that nasty Trojan downloader winshow. It was detected by AVG but AVG was unable to delete it. I disabled wnxp home restore and tried all the forum suggestions including running AVG in dos mode...I tried about every AV shareware but the virus was recognized only by AVG....very frustrating...AVG would clean all the Trojan installed files except one...and a host of othe exe files would propagate every time after restart. I ended up getting out the WINXP install CD and reinstalling windows completely..finally, no more virii.

This virus is a one of the most annoying I have ever tried to delete. For my computer, the file was dl.HTML. First if you have the up-to-date version of Norton AntiVirus 2004 then simply use its Quarantine feature and hold the file in Quarantine that should take care of it. To do this simply right click on the file/s and then scan with Norton it will say delete failed or something similar. Then when the quarantine tab comes up leave the file ticked and click finish.

press and hold the menu and center buttons for 10 seconds

I tried this didn't work what i had to do was just wait till the battery ran out =/ if you have a iHome try plugging it into that, might work. Hope this helps! ~Monster137

A floppy or a hard disk may be carrier of viruses.

Internet can transmit virus to your computer if antivirus is not installed.

programs purchased from unauthorized dealers, are mostly carriers of virus.

The System Volume Information folder is where system restore information is held. I first came across it in Windows ME, it is found in all flavours of Windows XP and Windows Vista. It is a very underated/inderused Windows tool, I have found it to be a life saver many times, I create restore points before and after installing new drivers or software. I manually configure System Restore depending on the number and size of the hard drives on the system. Normally I will turn off System restore for non System Drives, Reserving 12% of a 250 Gig Data Drive is a lot of wasted space. More info here http://www.theeldergeek.com/system_volume_information_folder1.htm and here http://www.theeldergeek.com/system_restore.htm

probably the code which has told or programmed the virus to do something ie delete files bascily telloing it what to do hope this helps

i dont think its illegal but if u get caught u can be charged. like if you do it but no one catches u then u wont get in trouble but if some one who got infected by ur virus and they find out u made it they can sue u for alot of money so i recomend u dont cuz u could get n alot of trouble.

WikiAnswers does not provide information about illegal acts, such as writing virus programs.

It's certainly possible, if you download and run unknown Active-X controls without paying attention to the publisher of the control. Internet Explorer 7 comes with enhanced security like "Protected Mode" and it's best to keep it active. It also comes with a popup blocker and a phishing filter to enhance your security. Windows Defender is free software for validated windows users made by Microsoft, and available at http://www.microsoft.com/download Windows Defender will stay in the background and keep watch for malware such as Spyware, Spybots, Adware, Trojans and other uglies. You can also do an online scan at http://safety.live.com Cheers!

A bad electricity supply can cause damage, as the power fluctuates, the computer can struggle for enough electricity and this can cause damange and data loss.

You can tell if you may be affected by switching the socket you use to power your computer and testing if the performance is different.

No, it isn't. Ghost 2003 will install, but it will not run on Windows Server 2003 . Unfortunately. No, it isn't. Ghost 2003 will install, but it will not run on Windows Server 2003 . Unfortunately.

I'm not sure I understand why you're asking this question. Contiguous files are simply files that are not broken up in pieces. As you disk fills up, when you delete files to make more room, the free space is scattered all over the disk. If you download a large file, or install software, there may not be enough room in any single place on the disk to fit the entire file. Windows puts chunks of the file in several places to make it fit. This can slow down the time it takes to load the file. When you defrag the disk, it attempts to make as many files contiguous as possible. Deleting contiguous files should be exactly the same procedure as with any other file. However, some files that the system uses must be contiguous. They can't be deleted because they are in use by the system. If you have any questions, please email me or check out my profile.

Short answer is no, you can use an anti-virus program and an anti-malware program together but you will have conflict issues when trying to run two anti-virus programs together.

You need to run these 5 essential steps to remove all the spyware on your computer.

1. Run Deckard's System Scanner (DSS)

2. Run Malwarebytes Anti-Malware

3. Run the anti spyware removal programs spybot

4 Run Superantispyware

5. Run a complete scan with free curing utility Dr.Web CureIt!

Install threat fire which will enhance your antivirus protection

To answer that question is very difficult. To be honest there are hundreds of legitimate and rogue antivirus programs. Now ofcourse I am not telling you to download rogue antivirus. What I am saying is to read the system requirements of every program you download and it should tell you what operating system is is available for.

unplug the mouse, network cable, keyboard cable, or power cable, but only by a bit. Then they won't notice it unplugged and will wonder why the parts are not working. Either that, or put a small piece of paper on the bottom of the laser mouse covering the laser. The mouse will not work if you do this.

"Webroot" is effective. The program stops viruses and worms, and it blocks destructive website data and viruses that come through normal web browsing. It also defends against spyware, adware, tracking cookies and other malware that may slow down or crash a system.

I don't know because it will not download. Why wont it?

Hello,

y is that ppl on the web lie you ask well its ease they don't no what there talking about if u have onbord sound on your PC witch 98% of PC do,anyway when you turn on your PC press f1 to enter set up (note)(some other PC may be diffrent) now once your there go to where your computer says audio is on auto chage to enabel sorry about spelling it worked for it allowed me to youse my speeker plus realtek for these who tried in stall realtek and it didnt work it will show once you have don't this hope this help if any other prbs conteck me at jasonbb12@live.com ( im PC crater and fixer )

type computer is analog and hybrid.

various categories is Mainframe Computer, Microcomputer,Mini computer and super computer

by clicking a advertisment that not famillar to you

This isn't something you'd want to do.

First, the return e-mail addresses on many Internet viruses are faked. It's part of the virus: stealing innocent people's e-mail addresses and using them as the return addresses to add to the confusion.

Second, if someone you know sent it to you, they almost certainly did it accidentally. They may be less technically well-informed than you, but they're no less innocent. And besides, their computer is already infected.

That would be illegal and would lower you to the same level as the person who sent it to you. Is it worth it to go to jail for that?

yes

You don't. Distributing computer viruses is illegal. Period.

Most of the time, the 'person who sent it to you' is either unknown due to masking and spoofing techniques, or simply another innocent victim who has no idea their machine has been forwarding the virus.

You're best best is to learn more about viruses at site such as http://www.symantec.com Learn why they are created, how they work, and what you can do to prevent infection.

true, may be innocent.

And plus if you send it back to the creator, he may get mad then decide to have a war with you, and you will probaly lose so dont bother

very good and true from first poster here.

we all should move to eliminate viruses, not spread them about, delete it, kill it, DONT resend it.

also you may be intresed to know now that most countries, carry a very hefty prison sentence for distributiing virusus, so you may want to think about that one to.

you also like above would be beter off going reading up on them, and not go the way of the media...and think its the worse thing since the plaugue....they are not, learn about them and DONT send them.I like to have the home address to go visit them wit a shotgun