- Rolex Worm Please help!
- Posted by Shawn on March 30th, 2005
I have windows XP, and Mcafee Anitvirus 8 or 9, I keep getting a popup
saying Potential Worm Activity Detected. Email Subject: Gift someone you
love with a ROlex ! [morrow] . I stop the email and i get the same thing
again over and over.
HERES THE UPDATE PLEASE HELP!
I cannot find anything in my registry, services, startup, thats reoccuring.
But I have found something here in my
local setting\temp directory These files are reoccuring
tsk.sys*****Which will not delete unless through safe mode
body.dat
mailz.dat
mcme.tmp
McVXXX<--- XXX replaces abunch of different charcters.
I know this worm is preventing me from starting my Outlook-express. I NEED
TO KNOW WHAT IS THIS WORM!!! Mcafee is not detecting it, and spy remover is
not detecting it, Both are up-to-date.
- Posted by David H. Lipman on March 30th, 2005
From: "Shawn" <luvmy96honda@bellsouth.net>
| I have windows XP, and Mcafee Anitvirus 8 or 9, I keep getting a popup saying Potential
| Worm Activity Detected. Email Subject: Gift someone you love with a ROlex ! [morrow] . I
| stop the email and i get the same thing again over and over.
Help was provided in; a.c.a-v
Please learn to Cross-Post to relevant News Groups and not Multi-Post.
--
Dave
http://www.claymania.com/removal-trojan-adware.html
http://www.ik-cs.com/got-a-virus.htm
- Posted by Leon Manfredi on March 30th, 2005
Could this be a Netsky type worm varient?
On Tue, 29 Mar 2005 20:32:32 -0600, "Shawn"
<luvmy96honda@bellsouth.net> wrote:
- Posted by David H. Lipman on March 30th, 2005
From: "Leon Manfredi" <manfred@toast.net>
| Could this be a Netsky type worm varient?
|
Good guess but Shawn used McAfee Stinger which targets the Netsky and all variants and
Stinger found nothing.
--
Dave
http://www.claymania.com/removal-trojan-adware.html
http://www.ik-cs.com/got-a-virus.htm
