Got a trojan and need help

Norton antivirus in NSW 2002, running on my windows 98, found this trojan
"photo1.JPG.src" and could not repair tried to submit to symantec and they
refused and are of no help. How do I get rid of this? I can't run a full
system scan since I recently updated my antivirus in April 04, via the
symantec site, and my computer is getting blue screens, hangs, and alot of
fatal exception errors from various locations. Tried housecall, but computer
hangs then shuts down by itself. Tried PC PitStop and says virus scanner
okay! Can I uninstall then reinstall Norton System Works '02 with this
trojan on it without causing any problems?

Sweetpea wrote in message ...
Norton antivirus in NSW 2002, running on my windows 98, found this trojan
"photo1.JPG.src" and could not repair tried to submit to symantec and they
refused and are of no help. How do I get rid of this? I can't run a full
system scan since I recently updated my antivirus in April 04, via the
symantec site, and my computer is getting blue screens, hangs, and alot of
fatal exception errors from various locations. Tried housecall, but computer
hangs then shuts down by itself. Tried PC PitStop and says virus scanner
okay! Can I uninstall then reinstall Norton System Works '02 with this
trojan on it without causing any problems?

Have a look at these


http://vil.nai.com/vil/content/v_100555.htm

http://www3.ca.com/securityadvisor/v....aspx?id=36370

Thanks Hugh...sorry its taken so long to get back to ya but this computer is
giving me alot of problems!! But I still don't understand if I can just
delete this trojan in my NAV quarantine, or just try to uninstall my NSW then
reinstal again, or should I try and download another AV from www.3ca.com site
you sent me too? Still not completely litterate in the computer world
yet...ha ha! Thanks for all your help!!

"Hugh Candlin" wrote:


Sweetpea wrote in message ...
Norton antivirus in NSW 2002, running on my windows 98, found this trojan
"photo1.JPG.src" and could not repair tried to submit to symantec and they
refused and are of no help. How do I get rid of this? I can't run a full
system scan since I recently updated my antivirus in April 04, via the
symantec site, and my computer is getting blue screens, hangs, and alot of
fatal exception errors from various locations. Tried housecall, but computer
hangs then shuts down by itself. Tried PC PitStop and says virus scanner
okay! Can I uninstall then reinstall Norton System Works '02 with this
trojan on it without causing any problems?

Have a look at these


http://vil.nai.com/vil/content/v_100555.htm

http://www3.ca.com/securityadvisor/v....aspx?id=36370

Not sure if this is some sort of glitch but if not, please keep to the =
original thread. You may safely delete the file that is in NAV's =
quarantine although this sounds as if the Trojan has compromised your =
system. What you need to do is follow the instructions to remove the =
Trojan in its entirety. While in NAV's quarantine, click once on the =
file to hilite it and then click Properties on the toolbar to get info =
on it. Next go to Symantec's site and look up the name of the Trojan for =
proper removal instructions.
http://securityresponse.symantec.com...r/vinfodb.html

--=20
Brian A.

Conflicts start where information lacks.
http://www.dts-l.org/goodpost.htm

"Sweetpea" wrote in message =
...
Thanks Hugh...sorry its taken so long to get back to ya but this =
computer is=20
giving me alot of problems!! But I still don't understand if I can =
just=20
delete this trojan in my NAV quarantine, or just try to uninstall my =
NSW then=20
reinstal again, or should I try and download another AV from =
www.3ca.com site=20
you sent me too? Still not completely litterate in the computer world=20
yet...ha ha! Thanks for all your help!!
=20
"Hugh Candlin" wrote:
=20
=20
Sweetpea wrote in message =
...
Norton antivirus in NSW 2002, running on my windows 98, found =
this trojan
"photo1.JPG.src" and could not repair tried to submit to symantec =
and they
refused and are of no help. How do I get rid of this? I can't run =
a full
system scan since I recently updated my antivirus in April 04, via =
the
symantec site, and my computer is getting blue screens, hangs, and =
alot of
fatal exception errors from various locations. Tried housecall, =
but computer
hangs then shuts down by itself. Tried PC PitStop and says virus =
scanner
okay! Can I uninstall then reinstall Norton System Works '02 with =
this
trojan on it without causing any problems?
=20
Have a look at these
=20
=20
http://vil.nai.com/vil/content/v_100555.htm
=20
http://www3.ca.com/securityadvisor/v...spx?id=3D36370
=20
=20

My apologies to you also, Brian, for taking so long to get back to you, but I
deleted the trojan, from my quarantine, and then my computer went bonkers!
Couldn't get it up and running until today. Went to Symantec Site but was of
no help, so my next question is can I uninstall my SystemWorks, then
reinstall? I haven't been able to run a virus scan since the day after I went
to Symantec's site and upgraded my antivirus subscription in April and I am
very worried about viruses! My live update seems to be working, says I have
all updates to my machine, but can't do a manual scan! I'm ready to try
another antivirus and scap Norton! I've had nothing but problems with them
since I bought Norton Systemworks 2002, last year! Didn't buy 2003 nor 2004,
due to problems!! The problems I was having was "ALOT" of was OE & OD fatal
exception errors especially this one....A fatal exception error OE at
0028:C18DA50F in VDX NAVEX(02) + 0003986F which I know is Norton, but can't
find any help on this error! Do you know what it means? Any help will be
Greatly Appreciated!! Also hopefully my machine wont go down again, so I can
get back to you, soon...haha! Thanks for your help!! )

"Brian A." wrote:

Not sure if this is some sort of glitch but if not, please keep to the original thread. You may safely delete the file that is in NAV's quarantine although this sounds as if the Trojan has compromised your system. What you need to do is follow the instructions to remove the Trojan in its entirety. While in NAV's quarantine, click once on the file to hilite it and then click Properties on the toolbar to get info on it. Next go to Symantec's site and look up the name of the Trojan for proper removal instructions.
http://securityresponse.symantec.com...r/vinfodb.html

--
Brian A.

Conflicts start where information lacks.
http://www.dts-l.org/goodpost.htm

"Sweetpea" wrote in message ...
Thanks Hugh...sorry its taken so long to get back to ya but this computer is
giving me alot of problems!! But I still don't understand if I can just
delete this trojan in my NAV quarantine, or just try to uninstall my NSW then
reinstal again, or should I try and download another AV from www.3ca.com site
you sent me too? Still not completely litterate in the computer world
yet...ha ha! Thanks for all your help!!

"Hugh Candlin" wrote:


Sweetpea wrote in message ...
Norton antivirus in NSW 2002, running on my windows 98, found this trojan
"photo1.JPG.src" and could not repair tried to submit to symantec and they
refused and are of no help. How do I get rid of this? I can't run a full
system scan since I recently updated my antivirus in April 04, via the
symantec site, and my computer is getting blue screens, hangs, and alot of
fatal exception errors from various locations. Tried housecall, but computer
hangs then shuts down by itself. Tried PC PitStop and says virus scanner
okay! Can I uninstall then reinstall Norton System Works '02 with this
trojan on it without causing any problems?

Have a look at these


http://vil.nai.com/vil/content/v_100555.htm

http://www3.ca.com/securityadvisor/v....aspx?id=36370

I personally would not use NSW, but the choice is yours. Yes you can =
uninstall/reinstall it.
If you have problems with uninstalling via add/remove programs or the =
utilities own uninstaller then see:
http://tinyurl.com/68yun
How to uninstall Norton SystemWorks 2002 manually from Windows 98/Me=20

If you are having trouble running your av then it may be a compromised =
system. The preferred is to run a full system scan with a DOS based =
anti-virus scanner. F-Prot for DOS is free, don't forget to get the =
latest definitions also which should be on the same page.
http://www.f-prot.com/products/home_use/dos/

Other ways are by running an online scan:
http://security.norton.com/default.a...us&venid=3Dsym
http://housecall.trendmicro.com/
http://www.kaspersky.com/remoteviruschk.html
http://www.bitdefender.com/scan/licence.php
http://www.pandasoftware.es/activesc...vescan-com.asp
http://www.dials.ru/english/www_av/
http://www.ravantivirus.com/scan/

--=20
Brian A.

Conflicts start where information lacks.
http://www.dts-l.org/goodpost.htm

"Sweetpea" wrote in message =
...
My apologies to you also, Brian, for taking so long to get back to =
you, but I=20
deleted the trojan, from my quarantine, and then my computer went =
bonkers!=20
Couldn't get it up and running until today. Went to Symantec Site but =
was of=20
no help, so my next question is can I uninstall my SystemWorks, then=20
reinstall? I haven't been able to run a virus scan since the day after =
I went=20
to Symantec's site and upgraded my antivirus subscription in April and =
I am=20
very worried about viruses! My live update seems to be working, says I =
have=20
all updates to my machine, but can't do a manual scan! I'm ready to =
try=20
another antivirus and scap Norton! I've had nothing but problems with =
them=20
since I bought Norton Systemworks 2002, last year! Didn't buy 2003 nor =
2004,=20
due to problems!! The problems I was having was "ALOT" of was OE & OD =
fatal=20
exception errors especially this one....A fatal exception error OE at=20
0028:C18DA50F in VDX NAVEX(02) + 0003986F which I know is Norton, but =
can't=20
find any help on this error! Do you know what it means? Any help will =
be=20
Greatly Appreciated!! Also hopefully my machine wont go down again, so =
I can=20
get back to you, soon...haha! Thanks for your help!! )
=20
"Brian A." wrote:
=20
Not sure if this is some sort of glitch but if not, please keep to =
the original thread. You may safely delete the file that is in NAV's =
quarantine although this sounds as if the Trojan has compromised your =
system. What you need to do is follow the instructions to remove the =
Trojan in its entirety. While in NAV's quarantine, click once on the =
file to hilite it and then click Properties on the toolbar to get info =
on it. Next go to Symantec's site and look up the name of the Trojan for =
proper removal instructions.
http://securityresponse.symantec.com...r/vinfodb.html
=20
--=20
Brian A.
=20
Conflicts start where information lacks.
http://www.dts-l.org/goodpost.htm
=20
"Sweetpea" wrote in message =
...
Thanks Hugh...sorry its taken so long to get back to ya but this =
computer is=20
giving me alot of problems!! But I still don't understand if I can =
just=20
delete this trojan in my NAV quarantine, or just try to uninstall =
my NSW then=20
reinstal again, or should I try and download another AV from =
www.3ca.com site=20
you sent me too? Still not completely litterate in the computer =
world=20
yet...ha ha! Thanks for all your help!!
=20
"Hugh Candlin" wrote:
=20
=20
Sweetpea wrote in message =
...
Norton antivirus in NSW 2002, running on my windows 98, found =
this trojan
"photo1.JPG.src" and could not repair tried to submit to =
symantec and they
refused and are of no help. How do I get rid of this? I can't =
run a full
system scan since I recently updated my antivirus in April 04, =
via the
symantec site, and my computer is getting blue screens, hangs, =
and alot of
fatal exception errors from various locations. Tried housecall, =
but computer
hangs then shuts down by itself. Tried PC PitStop and says =
virus scanner
okay! Can I uninstall then reinstall Norton System Works '02 =
with this
trojan on it without causing any problems?
=20
Have a look at these
=20
=20
http://vil.nai.com/vil/content/v_100555.htm
=20
=
http://www3.ca.com/securityadvisor/v...spx?id=3D36370
=20
=20

Hey Brian, Thanks for the advice but.....you'll never believe what I did?! I
did a complete recovery on my Win98 and lost everything, then tried to
reinstall NSW 2002, and again computer was giving me problems, so I
uninstalled it, got puter up and running, but now I'm back in the 90"s with
everything! Had to redownload IE 6, and everything still is so ancient! I
just don't know where to begin....Dummy me!! I just am not an illiterate
computer person....HA HA....but thanks for your help and if you have any
ideas on how to get me back into the future, it'd be greatly appreciated!
Hope you have a nice Labor Day!! )

"Brian A." wrote:

I personally would not use NSW, but the choice is yours. Yes you can uninstall/reinstall it.
If you have problems with uninstalling via add/remove programs or the utilities own uninstaller then see:
http://tinyurl.com/68yun
How to uninstall Norton SystemWorks 2002 manually from Windows 98/Me

If you are having trouble running your av then it may be a compromised system. The preferred is to run a full system scan with a DOS based anti-virus scanner. F-Prot for DOS is free, don't forget to get the latest definitions also which should be on the same page.
http://www.f-prot.com/products/home_use/dos/

Other ways are by running an online scan:
http://security.norton.com/default.a...d=us&venid=sym
http://housecall.trendmicro.com/
http://www.kaspersky.com/remoteviruschk.html
http://www.bitdefender.com/scan/licence.php
http://www.pandasoftware.es/activesc...vescan-com.asp
http://www.dials.ru/english/www_av/
http://www.ravantivirus.com/scan/

--
Brian A.

Conflicts start where information lacks.
http://www.dts-l.org/goodpost.htm

"Sweetpea" wrote in message ...
My apologies to you also, Brian, for taking so long to get back to you, but I
deleted the trojan, from my quarantine, and then my computer went bonkers!
Couldn't get it up and running until today. Went to Symantec Site but was of
no help, so my next question is can I uninstall my SystemWorks, then
reinstall? I haven't been able to run a virus scan since the day after I went
to Symantec's site and upgraded my antivirus subscription in April and I am
very worried about viruses! My live update seems to be working, says I have
all updates to my machine, but can't do a manual scan! I'm ready to try
another antivirus and scap Norton! I've had nothing but problems with them
since I bought Norton Systemworks 2002, last year! Didn't buy 2003 nor 2004,
due to problems!! The problems I was having was "ALOT" of was OE & OD fatal
exception errors especially this one....A fatal exception error OE at
0028:C18DA50F in VDX NAVEX(02) + 0003986F which I know is Norton, but can't
find any help on this error! Do you know what it means? Any help will be
Greatly Appreciated!! Also hopefully my machine wont go down again, so I can
get back to you, soon...haha! Thanks for your help!! )

"Brian A." wrote:

Not sure if this is some sort of glitch but if not, please keep to the original thread. You may safely delete the file that is in NAV's quarantine although this sounds as if the Trojan has compromised your system. What you need to do is follow the instructions to remove the Trojan in its entirety. While in NAV's quarantine, click once on the file to hilite it and then click Properties on the toolbar to get info on it. Next go to Symantec's site and look up the name of the Trojan for proper removal instructions.
http://securityresponse.symantec.com...r/vinfodb.html

--
Brian A.

Conflicts start where information lacks.
http://www.dts-l.org/goodpost.htm

"Sweetpea" wrote in message ...
Thanks Hugh...sorry its taken so long to get back to ya but this computer is
giving me alot of problems!! But I still don't understand if I can just
delete this trojan in my NAV quarantine, or just try to uninstall my NSW then
reinstal again, or should I try and download another AV from www.3ca.com site
you sent me too? Still not completely litterate in the computer world
yet...ha ha! Thanks for all your help!!

"Hugh Candlin" wrote:


Sweetpea wrote in message ...
Norton antivirus in NSW 2002, running on my windows 98, found this trojan
"photo1.JPG.src" and could not repair tried to submit to symantec and they
refused and are of no help. How do I get rid of this? I can't run a full
system scan since I recently updated my antivirus in April 04, via the
symantec site, and my computer is getting blue screens, hangs, and alot of
fatal exception errors from various locations. Tried housecall, but computer
hangs then shuts down by itself. Tried PC PitStop and says virus scanner
okay! Can I uninstall then reinstall Norton System Works '02 with this
trojan on it without causing any problems?

Have a look at these


http://vil.nai.com/vil/content/v_100555.htm

http://www3.ca.com/securityadvisor/v....aspx?id=36370

Now that's a shame. Unfortunately if you have Fdisked and/or formatted =
you are the only one who can get it back into the times. Seeing that you =
are starting from the beginning and if you haven't =
reformatted/re-installed since attempting to install NSW again, I would =
wipe the disk clean to start afresh without the registry clutter that =
NSW most probably left behind from the failed install.

If you still have the downloaded IE6 install exe, then burn it to a CD =
before reformatting/re-installing for use later so you won't have to =
download it again.

The first thing you want to do after re-installing Windows is get to the =
Windows Update site and start installing the Critical Updates. Do not do =
them all at once as that could cause more problems. If you happened to =
have acquired the MS Security Update CD when it was available that's =
even better. Run that first and then go to WU and get the rest. Pick a =
few at a time to download/install, reboot when finished with the first =
few, then go back and get a few more. Do this until there are no more =
left.

Next if you are now left without any Firewall and/or Antivirus, it is =
imperative that you get them. Both of these av apps are free along with =
definition updates, although Avast IIRC is only free for a year and then =
it they charge a nominal fee if you choose to keep it. Only install one =
or they will conflict with each other.
http://www.avast.com/i_idt_1016.html
www.grisoft.com

You can get a free firewall (ZoneAlarm) from ZoneLabs:
http://tinyurl.com/5m3jf

Now go out and get a good backup app so you can restore a previous =
backup without losing your apps and data.

2 that I recommend a
Backup MyPC
http://www.stompinc.com/bump/bump-retail.phtml?stp
Will backup the entire system including the registry and can be used to =
restore the computer to the state of the last backup. You can also =
backup/restore individual files.

Norton Ghost
http://www.symantec.com/sabu/ghost/ghost_personal/
Creates an image of the entire drive/s that can be used to restore the =
computer to the state of the last backup. Has many other features as =
well.

We can get to spyware/adware detection/removal apps later. Get your =
system protected by completing the above first.=20
=20

--=20
Brian A.

Conflicts start where information lacks.
http://www.dts-l.org/goodpost.htm

Thanks Brian for getting back so quickly! So how do I wipe the disk clean? I
went to the tinyurl.from Symantec site you showed me, and printed it, so do I
just follow those directions? I am soooo afraid to mess with the registry,
but I did find some NSW clutter in there! I did already go to WU and download
the critical updates slowly so as not to compromise my system again, but
don't have the MS Security Update cd, and I did download a free av from
grisoft.com temporaryly to keep safe, but my ISP states it's firewall is very
safe and really not needed out here in cow country, since we have just dial
up and go throught the phone company as our internet connection! I did
yeeeeaaarrrsss ago have the Zone Alarm but it messed with my computer also so
I uninstalled it! Don't want any firewall and av program to clash...just got
this computer up and running again, and as I said before, I'm no computer
geek....haha! But Thanks Soooooo much for all your Wisdom and Advice! Please
keep it coming to get me back to the future!! Have a Great Day!!

"Brian A." wrote:

Now that's a shame. Unfortunately if you have Fdisked and/or formatted you are the only one who can get it back into the times. Seeing that you are starting from the beginning and if you haven't reformatted/re-installed since attempting to install NSW again, I would wipe the disk clean to start afresh without the registry clutter that NSW most probably left behind from the failed install.

If you still have the downloaded IE6 install exe, then burn it to a CD before reformatting/re-installing for use later so you won't have to download it again.

The first thing you want to do after re-installing Windows is get to the Windows Update site and start installing the Critical Updates. Do not do them all at once as that could cause more problems. If you happened to have acquired the MS Security Update CD when it was available that's even better. Run that first and then go to WU and get the rest. Pick a few at a time to download/install, reboot when finished with the first few, then go back and get a few more. Do this until there are no more left.

Next if you are now left without any Firewall and/or Antivirus, it is imperative that you get them. Both of these av apps are free along with definition updates, although Avast IIRC is only free for a year and then it they charge a nominal fee if you choose to keep it. Only install one or they will conflict with each other.
http://www.avast.com/i_idt_1016.html
www.grisoft.com

You can get a free firewall (ZoneAlarm) from ZoneLabs:
http://tinyurl.com/5m3jf

Now go out and get a good backup app so you can restore a previous backup without losing your apps and data.

2 that I recommend a
Backup MyPC
http://www.stompinc.com/bump/bump-retail.phtml?stp
Will backup the entire system including the registry and can be used to restore the computer to the state of the last backup. You can also backup/restore individual files.

Norton Ghost
http://www.symantec.com/sabu/ghost/ghost_personal/
Creates an image of the entire drive/s that can be used to restore the computer to the state of the last backup. Has many other features as well.

We can get to spyware/adware detection/removal apps later. Get your system protected by completing the above first.


--
Brian A.

Conflicts start where information lacks.
http://www.dts-l.org/goodpost.htm

See inline.

"Sweetpea" wrote in message =
news
Thanks Brian for getting back so quickly! So how do I wipe the disk =
clean?

I know it's back to the drawing board but the same way you =
recovered/restored already, you will lose everything as before and have =
to reinstall the updates and any apps/progs you had. Doing this would =
put you back at a clean slate and a fresh registry which I would =
recommend if you are not familiar with the registry. If you do decide to =
try to clean the registry anyway, you do so at your own risk. If you =
alter/remove a wrong key even if by mistake you could wind up with a =
non-operable machine that will have to be wiped clean. Once you remove a =
key in the registry it is gone.

I went to the tinyurl.from Symantec site you showed me, and printed =
it, so do I=20
just follow those directions? I am soooo afraid to mess with the =
registry,=20
but I did find some NSW clutter in there!

If you decide to go this route then read/follow the instructions =
explicitly with great caution.

I suggest before attempting manual removal of NSW:
Look in Start Settings Control Panel Add/Remove Programs to see if =
it is listed and will uninstall from there.
If it isn't available to remove from there then start he
Using the Norton SystemWorks=99 cleanup utility (SYMClean)=20
http://tinyurl.com/6ovkj

Scroll down to read info on how to download the latest version and use =
it.=20

I did already go to WU and download the critical updates slowly so as =
not to compromise my system again

Good, but it's only a surface scratch for protection. As stated above, =
you will have to do it all over if you decide to recover/restore.

but don't have the MS Security Update cd.

Not a problem. What I suggest you do is Create a folder, call it WinUD, =
go to the corporate site and download/save the update files to that =
folder, then burn them to disk for future use should you need to install =
them again. The best way is to go to Windows Update, click on =
Personalize Windows Update, put a check next to "Show the update catalog =
link..." Save Setting. Click on the catalog link now listed on the =
update page and select the updates to save.
Or go directly to the Corporate site which IIRC does not include IE =
updates:
http://www.microsoft.com/windows98/d.../corporate.asp

For IE UD's:
http://www.microsoft.com/windows/ie/...al/default.asp

and I did download a free av from grisoft.com temporaryly to keep safe

Stick with it or try another if you aren't happy with it or you keep =
having NSW problems should you (shudder) want to reinstall it.

but my ISP states it's firewall is very safe and really not needed out =
here in cow country, since we have just dial=20
up and go throught the phone company as our internet connection!

And yet you believe them even after getting a virus. DO NOT depend on =
an outside firewall!! Install one locally on your machine for the best =
protection. If you have problems with the settings or don't understand =
them there are forums and ng's that can help you get it to peak =
performance. Many users in this ng use ZA and would be able to help =
although you may be directed to another forum/ng for help.=20

I did yeeeeaaarrrsss ago have the Zone Alarm but it messed with my =
computer also so=20
I uninstalled it! Don't want any firewall and av program to =
clash...just got=20
this computer up and running again

Reinstall a firewall, they are essential in todays times no matter =
what. Install the FW first, then install the AV, they should not =
conflict at all as they are two different types of apps that do separate =
tasks. If you have any doubt on what to allow/block access to, always =
block, then research what you blocked or change the setting to allow it =
if you have problem and it's a trusted needed app to connect.
2 apps to allow that are needed is your Browser and Microsoft Generic =
Host Process for Win32 Services.

, and as I said before, I'm no computer geek....haha! But Thanks =
Soooooo much for all your Wisdom and Advice! Please=20
keep it coming to get me back to the future!! Have a Great Day!!

You don't have to be a geek. All you need is a want to learn, effort to =
try and patience, lot's of patience. Even the knowledged hit roadblocks.

--=20
Brian A.

Conflicts start where information lacks.
http://www.dts-l.org/goodpost.htm