[HolyGeek] It's that time again folks...

[Know Mystery]

Hi Everyone -
 
Updated your virus definitions in the past day? 
 
Run a full scan in the past 24 hours?
 
Yeah, me neither.
 
:)
 
Lizzie's laptop was found to have 9 viruses when she ran AVG today - this is after she reformatted and reinstalled XP again only yesterday.
 
(As a reassurance, i have not used her laptop myself to connect to the net or send any mails or attachments in the past 3 days, and my own computer scans clean.)
 
AVG fixed 7 of the 9 viruses, but was not able to take care of netldr.exe and updr32.exe.
 
She is running Stinger now (which may fix them), but if that does not work, there are manual procedures available for both.
 
In the course of finding them, i came across a free online virus scanner from Trend Micro - here it is:
 
http://housecall.trendmicro.com/
 
Lobster had earlier recommended A-squared, which is also good.
 
I also came across another new antivirus resource - Sophos. It is ONLY geared towards business users (meaning no free home user software) BUT their write ups seem easy to follow. For example this is what Lizzie will be doing to fix the ntldr.exe problem. These instructions seem clear enough for a 16 year old to follow. I like that.
 






This section tells you how to disinfect.




Please follow the instructions for removing worms.
Check your administrator passwords and review network security. 
You will also need to edit the following registry entries, if they are present. Please read the warning about editing the registry. 
At the taskbar, click Start|Run. Type 'Regedit' and press Return. The registry editor opens. 
Before you edit the registry, you should make a backup. On the 'Registry' menu, click 'Export Registry File'. In the 'Export range' panel, click 'All', then save your registry as Backup. 
Locate the HKEY_LOCAL_MACHINE entries: 
HKLM\Software\Microsoft\Windows\CurrentVersion\Run\Win Patch = ntldr.exe 
HKLM\Software\Microsoft\Windows\CurrentVersion\RunOnce\Win Patch = ntldr.exe 
HKLM\Software\Microsoft\Windows\CurrentVersion\RunServices\Win Patch = ntldr.exe 
and delete them if they exist. 
Each user has a registry area named HKEY_USERS\[code number indicating user]\. For each user locate the entry: 
HKU\[code number]\Software\Microsoft\Windows\CurrentVersion\Run\Win Patch = ntldr.exe 
and delete it if it exists. 
Close the registry editor and reboot your computer. 
(From: http://www.sophos.com/virusinfo/analyses/w32sdbotgs.html  )
 
Stay safe out there everyone. Happy Weekend!
 
love,
joyce
 
 
 
 
		Do you Yahoo!?
Yahoo! Mail - 50x more storage than other providers!







Yahoo! Groups Sponsor


  ADVERTISEMENT 












Yahoo! Groups Links

To visit your group on the web, go to:http://groups.yahoo.com/group/HolyGeek/ 
To unsubscribe from this group, send an email to:[EMAIL PROTECTED] 
Your use of Yahoo! Groups is subject to the Yahoo! Terms of Service.