Trojan Uses Ms Hole

[nanotek]

Originally posted by RedRival@3 October 2003 - 11:04
Quote Todiscool:

Manuall removal instructions from norton.

http://securityresponse.symantec.com...an.qhosts.html

or from mcafee

http://us.mcafee.com/virusInfo/defau...virus_k=100719

assuming that is what this is.

u mean this?

how come the pages say they are oudated and no longer actuell ?

[sharedholder]

The page you were looking for was not found. The link may be outdated, or you may have typed the address (URL) incorrectly. You may find what you are looking for in one of the links below.

[toddiscool]

When I linked to em last night they were there, give me a sec. BTW - sorry i thought mcafee had a removal too but they don't it just there updats for there shit scanner, i will but the removal instructions here in a sec.

Removal Instructions 

All Windows Users :
Use current engine and DAT files for detection and removal.

The following EXTRA.DAT packages are being made available prior to the regularly scheduled weekly DAT release (working with EXTRA.DAT files ).

EXTRA.DAT
SUPER EXTRA.DAT

Manual Removal Instructions

As a patch for Internet Explorer does not yet exist, it is recommend that users Disable Active Scripting in Internet Explorer
Delete the following files:
%WinDir%\Help\hosts
%WinDir%\winlog

Set the following registry key value (Information on editing registry keys ):
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\
Tcpip\Parameters "DataBasePath" = %SystemRoot%\System32\drivers\etc
Delete the following registry key value (Information on deleting registry keys ):
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\
Services\Tcpip\Parameters\Interfaces\windows "r0x"
Reconfigure your DNS server settings as desired
Reconfigure your Internet Explorer settings as desired

[RedRival]

Originally posted by toddiscool@3 October 2003 - 20:13
When I linked to em last night they were there, give me a sec. BTW - sorry i thought mcafee had a removal too but they don't it just there updats for there shit scanner, i will but the removal instructions here in a sec.

not true when you I clicked on it before, they had manual removal instructions...

[Nightwolf]

Here is the removal tool...

http://securityresponse.symantec.com/avcen...moval.tool.html