Solved

virus??

Posted on 2002-05-31
9
299 Views
Last Modified: 2013-12-28
I'm working on a K-6 500 box w 64 ram win 98 4.10.2222A  I suspected a virus based on the problems my customer reported. I tried to load trend pcilin 98 OEM from a CD. It reaches the scan prior to installation point and starts scanning in the windows directories then closes. It gives no error message and closes completely down. It does not stop at the same spot each time indicating a corrupt file. I  tried pcillin 2002 and it stops as well. I've booted clean with rescue disk and it scanned with nothing found. I have checked the system files and repaired explorer. It's running IE 6.0 direct x 8 and OE 6. I have tried shutting down everything but explorer and systray... I'm stumped..  
0
Comment
Question by:hvbarth
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 3
  • 3
  • 3
9 Comments
 
LVL 7

Expert Comment

by:sorgie
ID: 7048126
if you can get online with it try this virus scan

http://housecall.antivirus.com/
0
 

Author Comment

by:hvbarth
ID: 7048152
been thar, done that, got the tee-shirt...  house call won't load...asp error and retry fails
0
 
LVL 7

Expert Comment

by:sorgie
ID: 7048163
Have the problems began since installing IE 6.0??
0
Online Training Solution

Drastically shorten your training time with WalkMe's advanced online training solution that Guides your trainees to action. Forget about retraining and skyrocket knowledge retention rates.

 
LVL 3

Accepted Solution

by:
ITsheresomewhere earned 100 total points
ID: 7048180
Have you considered running a dos/command line scan?

PC Cillin has a ERD that can be built and run from the A prompt.

On really annoying PCs I have had a bit better luck with the dos version from FProt.

http://www.f-prot.com/f-prot/download/

Might give it a try.
0
 
LVL 3

Expert Comment

by:ITsheresomewhere
ID: 7048182
oops I guess "booted with rescue disk and scanned..." means I didn't read close enough before responding.  Still thinking then.
0
 

Author Comment

by:hvbarth
ID: 7048188
I'm not sure when it started. The main problems reported to me were returned email from old address book entries and defrag was hanging up. I've got defrag going and sent myself an email.
0
 
LVL 7

Expert Comment

by:sorgie
ID: 7048195
I see you said you checked system files did you use system file checker??
0
 

Author Comment

by:hvbarth
ID: 7048214
I-Worm.Klez.H, W32/Klez.H

Fprot got that worm!
I figured it was a virus but credit is due for pointing to the right antivirus product.
0
 
LVL 3

Expert Comment

by:ITsheresomewhere
ID: 7048353
Glad to have been of assistance.

Just one footnote - with the current string of "anti virus retalitory" nature worms, on Windows 9x machines, I am finding it more expedient to run from cold DOS boot scans to hit some of these.  A bit more cumbersome but if you look at all the things KLEZ does, droppers, registry changes, antivirus, double file names, it really is not unusual to get a false reading from otherwise dependable antivirus software.


ITsy
0

Featured Post

Free Tool: Subnet Calculator

The subnet calculator helps you design networks by taking an IP address and network mask and returning information such as network, broadcast address, and host range.

One of a set of tools we're offering as a way of saying thank you for being a part of the community.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Learn how to PXE Boot both BIOS & UEFI machines with DHCP Policies and Custom Vendor Classes
This article summaries thoughts and ideas from two years of sustained use. It provides good reasoning to make the jump to Windows 10.
The viewer will learn how to successfully create a multiboot device using the SARDU utility on Windows 7. Start the SARDU utility: Change the image directory to wherever you store your ISOs, this will prevent you from having 2 copies of an ISO wit…
This is used to tweak the memory usage for your computer, it is used for servers more so than workstations but just be careful editing registry settings as it may cause irreversible results. I hold no responsibility for anything you do to the regist…

734 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question