Re: PWSteal.Lemir.Gen ----- help?!?!?!



wildberry
07-09-2005, 11:48 PM
a couple of hours ago norton popped up saying that the swin32.dll file was
infected by this Lemir thing again.. and then it said that it was able to
delete it.. i then rescanned my computer for viruses and nothing was
detected..

so i assume all is good now?.. i can have peace of mind now?..

thanks for your help guys!

"David H. Lipman" wrote:

> From: "wildberry" <wildberry@discussions.microsoft.com>
>
> | i was just using my computer as normal and then Norton AntiVirus tells me
> | that there is a virus on my computer, this PWSteal.Lemir.Gen affecting the
> | file C:\WINDOWS\Swin32.dll.. and then it said that it could not be repaired..
> |
> | i didnt know what to do.. so then i updated my virus definitions and then
> | scanned entire computer.. and it picked it up again.. then it said it could
> | not be repaired again...
> |
> | then i followed the symantec instructions for PWSteal.Lemir.Gen's removal..
> | and i clicked 'delete' in the Norton window as instructed.. then when i went
> | to close Norton AntiVirus it said that my computer was still 'affected by a
> | virus'.. okay so im lost.. i thought it was deleted.. it couldnt be
> | quarantined..
> |
> | then i followed the instructions to delete the stuff that it might have
> | affected in the registry.. but i couldnt find the files.. so now i'm stuck!!
> |
> | anybody can help?!?!
> |
> | am i still affected by this virus?!?! is it still a threat?!?! or am i safe..
> |
> | thanks in advance
>
>
> Dump the contents of the IE Temporary Internet Folder cache (TIF)
> Start --> Settings --> Control Panel --> Internet Options --> Delete Files
>
> Dump the contents of the Mozilla FireFox Cache { if you use FireFox }
> Tools --> Options --> Privacy --> Cache --> Clear
>
>
> Download CLEAN.EXE from the URL --
> http://www.ik-cs.com/programs/virtools/clean.exe
>
> It is a self-extracting ZIP file that contains the Kixtart Script Interpreter
> { http://kixtart.org Kixtart is CareWare } three batch files, two Kixtart scripts, two Link
> (.lnk) files and a PDF instruction file.
>
> GETFILES.BAT -- For downloading (FTP) the files needed to run the McAfee Command Line
> Scanner. If you are using Windows XP, you may have to disable the Windows XP FireWall to
> allow the FTP utility to download the needed files
>
> CLEAN.BAT -- For running within Windows after running c:\mcafee\GetFiles.BAT. If you choose
> to scan again at a future date, run this batch file. It will automatically check the date
> of the McAfee DAT files and if it is a couple of days old, it will download (FTP) the latest
> signature files and install them before performing the scan.
>
> DOSCLEAN.BAT -- For use on a Win9x/ME PC or on a Win2K/WinXP PC that is using FAT32 after
> you have booted from an Emergency Boot Disk or DOS disk and have already executed;
> c:\mcafee\GetFiles.BAT from within Windows. DOS disk boot images can be obtained from;
> http://www.bootdisk.com/bootdisk.htm
>
> I need you to perform the following...
>
> Execute; CLEAN.EXE
> Choose; Unzip
> Choose; Close
>
> Execute; c:\mcafee\GetFiles.BAT
> { or Double-click on 'GetFiles Link' in c:\mcafee }
>
> Reboot the PC into Safe Mode [F8 key during boot]
>
> Shutdown as many applications as possible !
> It would also help for you to read - "How to perform a clean boot in Windows XP"
> http://support.microsoft.com/kb/310353
>
> Execute; c:\mcafee\CLEAN.BAT
> { or Double-click on 'Clean Link' in c:\mcafee }
>
> A final report in HTML format called C:\mcafee\ScanReport.HTML will be generated. At the
> end of the scan, it will be displayed in your browser (Opera, FireFox or Internet Explorer).
> It is suggested that you move the report out of c:\mcafee before performing another scan.
> It would be a good idea to scan in Safe Mode and in Normal Mode and save a copy of the HTML
> report for each session.
>
>
> --
> Dave
> http://www.claymania.com/removal-trojan-adware.html
> http://www.ik-cs.com/got-a-virus.htm
>
>
>

David H. Lipman
07-09-2005, 11:48 PM
From: "wildberry" <wildberry@discussions.microsoft.com>

| a couple of hours ago norton popped up saying that the swin32.dll file was
| infected by this Lemir thing again.. and then it said that it was able to
| delete it.. i then rescanned my computer for viruses and nothing was
| detected..
|
| so i assume all is good now?.. i can have peace of mind now?..
|
| thanks for your help guys!
|

Run the scan I suggested you perform and you can have "peace of mind".

--
Dave
http://www.claymania.com/removal-trojan-adware.html
http://www.ik-cs.com/got-a-virus.htm


Re: PWSteal.Lemir.Gen ----- help?!?!?!