pooh.vbs, lipa, boot.exe and aikelyu viruses......

[epardz_azia]

---

You can download PCLinux OS and run the live CD ; just manually delete all virus as stated above. Some of these viruses are some made as an email attachment. As what I've said you may freeze the entire drive C or to where or OS installed. Note! the system 32 folder is at risk with these types of viruses. :mrgreen:

[vladmire]

from butitoys post:

http://www.techspot.com/vb/topic58138.html

comprehensive guide regarding virus or spyware removal..

[cellularis]

unsaon man ni pagwagtang? naa ko aikelyu and pooh and kernel virus...
naa ko mga antivirus like Norton and AVG, di man madetect. di pod ko kabaw unsaon pagdelete kay wa man ko kabaw asa pangitaon.
murag naa sa system 32, pero unsaon pagpangita? pls help

[cellularis]

i've had this virus multiple times pero dili jud cya ma detect.

i even scanned & formatted the flash drive pro dili jud ma delete..

so what i did i manually deleted the virus...

unsaon pagmanually delete sa virus?? naa pooh.vbs sa ako USB and laptop

[detour]

Boot.exe is a Trojan Backdoor.IRC.Ratsou.B.
Boot.exe spreads via open network shares.
Related files:
C:\Note.exe
%System%\Hid.exe
%System%\Explorer.dll
%System%\Iexplore.dll
%Windir%\Aim.dll
%Windir%\Boot.exe
%Windir%\C.dll
%Windir%\Crazy.exe
%Windir%\Dr.exe
%Windir%\Empavms.exe
%Windir%\Ipservers.dll
%Windir%\Java.dll
%Windir%\LibParse.exe
%Windir%\Lsass.exe
%Windir%\Miconfig.exe
%Windir%\Moo.dll
%Windir%\Msccl.dll
%Windir%\Msconig.exe
%Windir%\Nhtml.dll
%Windir%\Ratsou.exe
%Windir%\Regedit.dll
%Windir%\Restart.exe
%Windir%\Screen.dll
%Windir%\Sysboot.dll
%Windir%\Syste32.dll
%Windir%\Users.dll
%Windir%\Wind.dll
Adds the value:
"HID.EXE"="%System%\HID.EXE"
"lsass"="%Windir%\Debug\UserMode\lsass.exe"
to the Windows startup registry keys.


Removal:
Kill Boot.exe process and remove Boot.exe from Windows startup using antivirus
or
Rename boot.exe then delete it.

[robert_papalid_ece]

yeah, the manufacturing company where i worked before, suffered from the effect of these viruses.

the aikelyu was not really that deadly, but annoying.
the others were.

so as an advice, be very cautious in using your flash discs, and follow the preventive measures mentioned above. i can add no more.

[detour]

unsaon pagmanually delete sa virus?? naa pooh.vbs sa ako USB and laptop

Manually delete the virus:

1. rename the virus name then change the file extension: sample from boot.exe to anyname.dll

then delete

note: bisan dili nimu e delate basta marename lang

[cellularis]

thanks, detour...

for those who are infected with these viruses, there is another solution for removing if your antivirus wont work,
click on this link http://markmanching.blogspot.com/2007/09/how-to-remove-poohvbs-from-your-system.html
step by step instructions on how to remove pooh.vbs, kernell.dll.vbs, aikelyu, etc.
it worked for me, i hope it works for you too.

[akera]

pwde pd ninyo i-highjack bai! langkat jud na tnan! run highjack in safe mode....

[butitoy]

shortest way is download ComboFix. exe

let it run.

ill bet my PC with this tool.

then after..

install a NOD32