Re: Can't delete virus file with Revolution
Further scans and searches for files that could be associated with the NMap Win virus returned no results. I have to conclude that this virus alarm of SpywareSweeper was wrong. Other deficiencies of this programs are that it prompts for updates when none are available and that it indeed did not quarantine and delete three cookies it had found. I found the following statement on a webpage of Symantec: Behavior SpywareSweeper is a misleading application that may give exaggerated reports about potential risks on the computer. One question that remains for me in the broader context: Is it possible to remove the protection of Wiindows files from inside Revolution? Regards, Wilhelm Sanke ___ use-revolution mailing list use-revolution@lists.runrev.com Please visit this url to subscribe, unsubscribe and manage your subscription preferences: http://lists.runrev.com/mailman/listinfo/use-revolution
Re: Can't delete virus file with Revolution
Hi Wilhelm, Use need to use the ATTRIB command. Best regards, Mark Schonewille -- Economy-x-Talk Consulting and Software Engineering http://economy-x-talk.com http://www.salery.biz Quickly extract data from your HyperCard stacks with DIFfersifier. http://differsifier.economy-x-talk.com Op 29-aug-2007, om 10:45 heeft Wilhelm Sanke het volgende geschreven: One question that remains for me in the broader context: Is it possible to remove the protection of Wiindows files from inside Revolution? Regards, Wilhelm Sanke ___ use-revolution mailing list use-revolution@lists.runrev.com Please visit this url to subscribe, unsubscribe and manage your subscription preferences: http://lists.runrev.com/mailman/listinfo/use-revolution
Can't delete virus file with Revolution
The virus scanner Spyware Sweeper found a NMap Win 1.2.12 virus on
one of my computers at
C:\WINDOWS\Installer\{CC550492-0747-48E4-A37C-5A2A0C815489}\NewShortcut1.exe,
but fails to quarantine or delete it, i.e. it performs the operations of
quarantining and deleting on that file, but next time when you do a
virus sweep the file is there again. This could be probably a deficiency
of Spyware Sweeper, because I got other problems with that program, too.
Another virus scanner, Spy Sweeper by Webroot, however does not flag
this file as a virus.
C:\WINDOWS\Installer is a hidden folder that is not displayed when I
try to access it with Windows, but I can access it using Revolution and
also list the subfolders - among them
{CC550492-0747-48E4-A37C-5A2A0C815489}, which contains the
NewShortcut1.exe file.
There are more NewShortcut files in the subdirectory with different
numbers including a RTF file, which however produces garbage when I try
to put it into a field using
put URL
file:C:/WINDOWS/Installer/{CC550492-0747-48E4-A37C-5A2A0C815489}/NewShortcut26.rtf
into fld 1
or
set the rtftext of fld 1 to URL
file:C:/WINDOWS/Installer/{CC550492-0747-48E4-A37C-5A2A0C815489}/NewShortcut26.rtf.
Replacing file with binfile does not help either, there is only
garbage in the field.
Now, trying to delete the virus file using
delete URL
file:C:/WINDOWS/Installer/{CC550492-0747-48E4-A37C-5A2A0C815489}/NewShortcut1.exe
produces an error message can' delete that file - probably because the
file's cantdelete property or the equivalent for Windows is apparently
set to true.
How could I change this cantdelete property of the virus in Revolution
to be able to finally delete it?
Any help is appreciated.
Best regards,
Wilhelm Sanke
http://www.sanke.org/MetaMedia
___
use-revolution mailing list
use-revolution@lists.runrev.com
Please visit this url to subscribe, unsubscribe and manage your subscription
preferences:
http://lists.runrev.com/mailman/listinfo/use-revolution
Re: Can't delete virus file with Revolution
- Original Message - From: Wilhelm Sanke [EMAIL PROTECTED] but fails to quarantine or delete it, i.e. it performs the operations of Yep. It's being re-installed usually after a reboot, sometimes without. You need to do a Google search on removing this particalar malware variant and follow (print out and follow) the directions. You'll probably have to restart in Safe Mode to solve it. Scott Kane ___ use-revolution mailing list use-revolution@lists.runrev.com Please visit this url to subscribe, unsubscribe and manage your subscription preferences: http://lists.runrev.com/mailman/listinfo/use-revolution
Re: Can't delete virus file with Revolution
Wilhelm,
Why don't you simply tell windows to show invisible files and folders?
Best regards,
Mark Schonewille
--
Economy-x-Talk Consulting and Software Engineering
http://economy-x-talk.com
http://www.salery.biz
Quickly extract data from your HyperCard stacks with DIFfersifier.
http://differsifier.economy-x-talk.com
Op 28-aug-2007, om 18:03 heeft Wilhelm Sanke het volgende geschreven:
The virus scanner Spyware Sweeper found a NMap Win 1.2.12 virus
on one of my computers at
C:\WINDOWS\Installer\{CC550492-0747-48E4-A37C-5A2A0C815489}
\NewShortcut1.exe,
but fails to quarantine or delete it, i.e. it performs the
operations of quarantining and deleting on that file, but next time
when you do a virus sweep the file is there again. This could be
probably a deficiency of Spyware Sweeper, because I got other
problems with that program, too.
Another virus scanner, Spy Sweeper by Webroot, however does not
flag this file as a virus.
C:\WINDOWS\Installer is a hidden folder that is not displayed
when I try to access it with Windows, but I can access it using
Revolution and also list the subfolders - among them
{CC550492-0747-48E4-A37C-5A2A0C815489}, which contains the
NewShortcut1.exe file.snip
___
use-revolution mailing list
use-revolution@lists.runrev.com
Please visit this url to subscribe, unsubscribe and manage your subscription
preferences:
http://lists.runrev.com/mailman/listinfo/use-revolution
Re: Can't delete virus file with Revolution
The following link contains information about manually removing the virus.
http://www.spywaredb.com/remove-nmap-win-1-2-12/
All the best
Matthias
Original Message
Subject: Can't delete virus file with Revolution (28-Aug-2007 18:06)
From:Wilhelm Sanke [EMAIL PROTECTED]
To: [EMAIL PROTECTED]
The virus scanner Spyware Sweeper found a NMap Win 1.2.12 virus on
one of my computers at
C:\WINDOWS\Installer\{CC550492-0747-48E4-A37C-5A2A0C815489}\NewShortcut1.
exe,
but fails to quarantine or delete it, i.e. it performs the operations of
quarantining and deleting on that file, but next time when you do a
virus sweep the file is there again. This could be probably a deficiency
of Spyware Sweeper, because I got other problems with that program, too.
Another virus scanner, Spy Sweeper by Webroot, however does not flag
this file as a virus.
C:\WINDOWS\Installer is a hidden folder that is not displayed when I
try to access it with Windows, but I can access it using Revolution and
also list the subfolders - among them
{CC550492-0747-48E4-A37C-5A2A0C815489}, which contains the
NewShortcut1.exe file.
There are more NewShortcut files in the subdirectory with different
numbers including a RTF file, which however produces garbage when I try
to put it into a field using
put URL
file:C:/WINDOWS/Installer/{CC550492-0747-48E4-A37C-5A2A0C815489}/
NewShortcut26.rtf
into fld 1
or
set the rtftext of fld 1 to URL
file:C:/WINDOWS/Installer/{CC550492-0747-48E4-A37C-5A2A0C815489}/
NewShortcut26.rtf.
Replacing file with binfile does not help either, there is only
garbage in the field.
Now, trying to delete the virus file using
delete URL
file:C:/WINDOWS/Installer/{CC550492-0747-48E4-A37C-5A2A0C815489}/
NewShortcut1.exe
produces an error message can' delete that file - probably because the
file's cantdelete property or the equivalent for Windows is apparently
set to true.
How could I change this cantdelete property of the virus in Revolution
to be able to finally delete it?
Any help is appreciated.
Best regards,
Wilhelm Sanke
http://www.sanke.org/MetaMedia
___
use-revolution mailing list
use-revolution@lists.runrev.com
Please visit this url to subscribe, unsubscribe and manage your
subscription preferences:
http://lists.runrev.com/mailman/listinfo/use-revolution
To: use-revolution@lists.runrev.com
___
use-revolution mailing list
use-revolution@lists.runrev.com
Please visit this url to subscribe, unsubscribe and manage your subscription
preferences:
http://lists.runrev.com/mailman/listinfo/use-revolution
Re: Can't delete virus file with Revolution
Mark Schonewille [EMAIL PROTECTED] wrote: Why don't you simply tell windows to show invisible files and folders? Thanks, this however was already set in my folder options, but nevertheless folder installer and its subfolders and files remained invisible. What was additionally necessary was to deactivate the checkbox in folder options hide protected system files. Now the hidden folders and files are displayed and I can remove the Windows file protection. I have put the presumably infected file NewShortcut1.exe temporarily into the trash bin and will now run a new scan to see what happens. Matthias wrote: The following link contains information about manually removing the virus. http://www.spywaredb.com/remove-nmap-win-1-2-12/ All the best Matthias And thanks for that link. A first search for files that are listed in that link as connected with the NMap virus came up with no results. I will continue the search, but maybe it could also be possible that file NewShortcut1.exe is a non-infected regular file which was mistakenly indicated as infected by the virus scanner? Best regards, Wilhelm Sanke ___ use-revolution mailing list use-revolution@lists.runrev.com Please visit this url to subscribe, unsubscribe and manage your subscription preferences: http://lists.runrev.com/mailman/listinfo/use-revolution
