1 reply to this topic

[aakash]

Hi
After i had completed a fresh WinXp install (c drive was formatted thru Dos using a WIN 98 bootable disk ),
i was attacked by this
Packed.Generic.233 Virus!

I was using my IE 6 which comes builtin. and no Antivirus.

Then i installed NAV Enteprise Edition 7 and it detects the virus in the Temp folder .

HERE IS THE PROBLEM:
1>
Even if i remove the files on deleting thru NAV, new files
(2 to be precise with BNPxx .tmp extension --xx -are the new numbers designated every time)
are detected as they are created again and detected by RealtimeScan after restart and/or Logging off .

2>
Moreover after restart the DEP Data Execution Protection message is displayed for Program:Windows Explorer.

3>
Occasionally the ie 6 doesn't allow web pages to display!

Hence i have installed FireFox 3.0.4. Now am able to access the net.

I have 4 questions
1>
IS the threat very dangerous
2>
Do i need to use your services in the Malware/ HJT Removal Section.
3>
Is the Dos formatting Low -Level Formatting ?or i need to use some other program for low level format incase needed,
I hope HJT is enough and i do not need to reformat !

4> could you advise me some nice program for low- level format?
5>
Do I need to repost my query in the Removal section again of this forum as instructed by the Experts?

I did install the ERUNT program for backing up the registry and
have yet to Download the HJT installer program.

Kindly advise , i don't mind going the HJT way. iT WILL SAVE ME TON OF MY TIME!! i HOPE SO!
Thank you.

[Doug]

Hello aakash,

Your Win98 fdisk should be sufficient.
However... It will only format in the FAT32 form.

You should then use your WinXP installation media to allow NTFS reformatting before installation.
NTFS is desireable because it allows for additional native security features of XP.

Some folks do use and recommend KillDisk and/or DBAN.

Your procedure should have been fine.
And you most likely acquired the infection afterwards while using IE 6 without antivirus.
________________

Yes at this point, you should start a new thread over in Malware removal

read here: http://forums.whatth...ers_t34502.html
post here: http://forums.whatth...emoval_f27.html

Welcome to WhatTheTech Forums.