Link to home
Start Free TrialLog in
Avatar of jacrous
jacrous

asked on

Virus ??

A frend called me with the following :
He say he has 4 Virus
VBS.FRELINK
VBS.FRELINK
VBS.NETWORK
VBS.WORM GENERIC

The following files are infected :
LINKS.VBS
RUNDLL.VBS

Northon an Pc_cellin don't find anything.
The machine is very slow starting...
It is a NEC computer with Win98.
Can any one help me on this ? Jacques
Avatar of Otta
Otta

Try http://AntiVirus.CAI.COM

Download and install "Inoculate IT Personal Edition".
It is 100% "free" for personal use.
Also, see:

http://www.viruslist.com/eng/viruslistfind.asp?findWhere=011&findTxt=freelink

for details from the AVP web-site.
-----
VBS.FreeLink
Virus Encyclopedia
This is a worm written in Visual Basic Script language (VBS). This worm spreads via e-mail and IRC (Internet Relay
             Chat) channels. Being executed the worm script creates new script file "RUNDLL.VBS" in the Windows system
             folder and modifies system registry to execute this scri...
Oh yes, I think the Kids got that one for me from IRC a while back and I used F-Prot to get rid of it.

F-prot is good but hasn't been updated in a while. It got rid of a couple of viruses I had about a year ago that Norton didn't see, and thier online database discounted as a rumoured viruses only, never known in the wild. I kind of wish I'd kept a copy of them to send to their research center. Works in DOS and one has to set back the system date because the only available version has "expired"

I'll go looking if you want it.

Road Warrior
For what its worth the only two anti-virus programs I use and have found effective are the two identified above, Inoculate and FPROT which is Command System Software. They have found and fixed viruses that the others couldn't find. Probably a better one around where its user preference but have not heard or researched any further. Dave
RoadWarrior wrote:

> the only available version has "expired"

Check: http://www.complex.is/f-prot/

FP-Win v3.07 has been released on February 25th, 2000.
Oh cool, guess I don't check very often. Actually I think it was around  december I last checked  :-)
F-prot is good but hasn't been updated in a while. > the only available version has "expired" >>Check: http://www.complex.is/f-prot/ 

here is where I go for F-prot which is free for personal use and updates quite frequently.  The best as far as I am concerned and the only I recommend to my customers

ftp://ftp.datafellows.com/anti-virus/free

download the latest revision and LOVE it
I'm starting to think I must have found a mirror that fell into disuse, I was all ready to mourn it's passing and all.

Just curious, anybody actually detect a virus with a regular check? I usually detect them within a day due to system behaviour. Never ran a virus check when I thought the system was okay and had it find anything.
hehe, I barely ever run my virus software on my home systems.  Mostly because I have a small network behind a good firewall and I know when risks are high.  That's when I run it once and shut it off.

For clients and my office systems, it's a different story.

Anyway, jacrous, check out F-prot.  It's a bit cryptic but once you understand it, you'll love it and you will feel secure in the future.  Heck, I ask people to send me virii!!!

1cell
http://members.home.com/liquitech
ASKER CERTIFIED SOLUTION
Avatar of makisupa
makisupa

Link to home
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Start Free Trial
Otta: I just checked my version of FPROT and its 4.58.3, I think you are visiting the wrong site! Me
Avatar of jacrous

ASKER

Well,well, things are getting worse, I downloaded Inoculate and F-Prot + updates, they both istalled well on my computer, but on my frend, no dice, tomorrow I will try makisupa idea. Jaro
You have to give an "A" for effort! We are still trying! Dave
P.S. Don't know what engine you used from FPROT, was it the 4.58.3 with the up to date definitions?
Avatar of jacrous

ASKER

emery800 : The version I downloaded is 3.07 with macro.def dated 26/04/00
and sign.def dated 19/01/00. Where did you get your version ? Jaro
jacros, you say "no dice".  What happened exactly?  The install from the zip file can be kind of confusing.  If you can tell me what happened, we can probably straighten it out.
EMERY800 wrote:
> I just checked my version of FPROT
> and its 4.58.3, I think you are visiting the wrong site!

I'm not -- are you sure?

F-Prot is the product of an Icelandic citizen (Fridrick Skulason).

His web-site, within the '.IS' (Iceland/Island) domain, is the official source for F-PROT.
perhaps I'm confused but I thought F-Prot (f-protect) was a product of Datafellows.  That's who I bought it from for my company.
I purchase it through a distributor or get it on-line. The web page is http://www.commandcom.com/ you just want to make sure you get the latest engine from them. Its works great for me, I have never seen the one you are talking about. Sorry. Dave
Its command system software and if you search that name it will take you right to its url.
> I thought F-Prot was a product of Datafellows.

No, although Datafellows has marketing-rights for the software.
Avatar of jacrous

ASKER

1cell : I installed on my computer, all works allright for F-Prot and InoculateIT, on my frend's computer, it won't finish install, it tells me that files are missing, the software is not up to date,  to get the update, and then with the updated data, it still does not work, same problem. Jaro

set your system date back to the release date of the version your have, then run it in dos mode  then put your system date right again. This is what I had to do.
Avatar of jacrous

ASKER

makisupa : I accepted your answer, being the one that worked perfectly.
I also thanks all of you, the effort was remarqable and I wish I could have paid everybody. Thanks you all. Jacques
Not looking for the points only the self-satisfaction as working as part of the team in helping others and fixing their problems, glad yours is fixed. Dave
Well thanks for the pionts which aren't really important to me, I'm
glad I could of been of assistance in solving your problem. and I hope in return you can help someone else out in a time of need

Dennis