As several others have pointed out, you are going to waste a great deal
of time going around in ever diminishing circles. I understand the need
to find the cause/source of the malware but set yourself a time limit to
clean the system and stick to it. If you don't succeed, wipe the disk.
If you do find the infection causing the problem and subsequently
understand the infection vector, still wipe the disk.
Before you reach your limit, try a different approach. Much malware is
loaded using rootkit techniques and is resistant to common anti-virus
detection. Try this program; it has saved me many hours of frustration:
http://greatis.com/unhackme/download.htm
or direct download:
http://www.greatissoftware.com/unhackme.zip
-----Original Message-----
From: Miguel Gonzalez [mailto:[EMAIL PROTECTED]
Sent: Wednesday, October 22, 2008 11:47 AM
To: NT System Admin Issues
Subject: RE: do i have a virus?
Ok, I'm finding some suspicious cookies and some trojans. However, after
cleaning up with some of this free tools I can't still add a printer, restart
the printer spooler or the windows installer service.
Since this machine has automatic windows updates, I'm fearing that a windows
update could have triggered this issue.
And answering the people, I need to know what has happened to avoid this could
spread to other computers in the network.
Thanks,
Miguel
--- El mié, 22/10/08, Todd Lemmiksoo <[EMAIL PROTECTED]> escribió:
De: Todd Lemmiksoo <[EMAIL PROTECTED]>
Asunto: RE: do i have a virus?
Para: "NT System Admin Issues" <ntsysadmin@lyris.sunbelt-software.com>
Fecha: miércoles, 22 octubre, 2008 10:40 Go to infectedornot.com and
run their free scanner .
Todd
-----Original Message-----
From: Webster [mailto:[EMAIL PROTECTED]
Sent: Wednesday, October 22, 2008 8:13 AM
To: NT System Admin Issues
Subject: RE: do i have a virus?
-----Original Message-----
From: Miguel Gonzalez
[mailto:[EMAIL PROTECTED]
Subject: do i have a virus?
Two days ago our printers disappeared from our
windows xp machine.
After trying to add them again, we got an error that
we couldn't run
because printer spooler is not running. When I went to
start the
printer spooler, I got an error saying that it
couldn't be run (error
1804). After googling a bit, some people said that we
could have
viruses on the machine. We have symantec installed,
and after scanning
we got some viruses that were quarantined. We tried to
uninstall
Symantec and install McAfee but now we get an error
saying that the
windows installer cannot be run. Microsoft recommends
reregister the
windows installer (which we have done) and if it
doesn't work, rename
dlls and the windows installer and install it again.
Since I don't trust very much this reinstall of
the windows installer
as a solution, anyone can give me any hint of what
might be happening
or we should check beforehand?
I know this doesn't answer your question - UT - dump McCrappy and
Symantec and try Vipre.
Webster
~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ <http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/> ~
