Spyware, Viruses, & Security forum

General discussion

Identifying the infecting virus?

I work away from home, and it would appear that some time ago my daughter, using the home PC, allowed in a Virus or Trojan, despite the PC having Norton AntiVirus 2004 and the Firewall. My attempts to get rid of the virus each time I go home have been frustrated, there isn't much on the Symantec Web site to help in identifying the virus - hopefully somebody here will recognise the Symptoms:

The message upon trying to connect to any Web page is:

"Forbidden: You were denied access because: Access denied by Access Control List". The default for allowing a remote program to access the PC has been changed to "Permit", and can't be changed back to Block.

Intelligent updater (with the latest definitions being taken home with me) won't work, as the virus issue the false message that the subscription has expired (it runs until December 2005). The Virus checking panel for Norton Virus has "Check for viruses and Trojans" blocked out. The PC can't be booted in safe mode. Running the virus scan from using the Norton disk as a boot disk doesn't discover anything - trying to /dump the latest virus definitions for the CD to use upon booting up falls foul of the "subscription expired" interception.

The infection probably took place early January 2005. First thing I tried was taking home the 10 latest virus removal .exes from the Symantec Web site - whatever the infection is, it isn't one of those. Re-installing Norton didn't work, so I'm rather snookered.

I'm hoping that somebody reading this Post will immediately recognise the Virus/Trojan from the description. I can then get rid of it this time, when I return home in a fortnight (I have a laptop here).

Many thanks,

Mike

Discussion is locked
You are posting a reply to: Identifying the infecting virus?
The posting of advertisements, profanity, or personal attacks is prohibited. Please refer to our CNET Forums policies for details. All submitted content is subject to our Terms of Use.
Track this discussion and email me when there are updates

If you're asking for technical help, please be sure to include all your system info, including operating system, model number, and any other specifics related to the problem. Also please exercise your best judgment when posting in the forums--revealing personal information such as your e-mail address, telephone number, and address is not recommended.

You are reporting the following post: Identifying the infecting virus?
This post has been flagged and will be reviewed by our staff. Thank you for helping us maintain CNET's great community.
Sorry, there was a problem flagging this post. Please try again now or at a later time.
If you believe this post is offensive or violates the CNET Forums' Usage policies, you can report it below (this will not automatically remove the post). Once reported, our moderators will be notified and the post will be reviewed.
Collapse -
"Access Denied By Access Control List"

In reply to: Identifying the infecting virus?

Collapse -
I also would suggest........

In reply to: "Access Denied By Access Control List"

Download and install the following programs, If they're not on your computer, yet:
- AdAware SE: http://www.lavasoftusa.com/support/download/
- Spybot 1.3: http://www.safer-networking.org/en/mirrors/index.html

Do a System-Scan with AdAware SE:
- Open AdAware SE
- First of all, check for updates.
To do this, click on 'Check for updates now', click the 'Connect'-button and, if there are new updates, click 'OK' and then 'Finish'.
- Now, do a system-scan by clicking the 'Start'-button.
- In the next screen, select 'Perform Full System scan' and click the 'Next'-button.
- Sit back and relax, while Adaware is performing the system-scan.
- When the scan is done, right-click in the list of items, that AdAware found, and select 'Select All', click the 'Next'-button and then 'the 'Finish'-button.
- Close AdAware SE.

Do a system-scan with Spybot 1.3:
- Open Spybot 1.3
- First, Check for updates
click the 'Search for updates'-button. If there are updates available, select them and click the 'Download updates'-button.
- Click 'Search and destroy' and then 'Check for problems'.
- Relax, while Spybot is performing it's scan.
- When Spybot is done, it will show a list of found items (or congratulate you with a clean computer). Click 'Fix selected problems' to delete the items.
- Close Spybot 1.3


Download Micosoft AntiSpyware
http://www.microsoft.com/athome/security/spyware/software/default.mspx

Please run a "Full System Scan" using Microsoft AntiSpyware and then post a new log. Please check off all three options to run during the scan:

Scan Memory Locations and running processes
Scan selected drives/folders (be sure to select all fixed/hard drives)
Deep Scan Folders

Please fix anything that shows up unless you recognize it and then reboot the computer.

Go for free online Virus scans here:

http://housecall.trendmicro.com/housecall/start_corp.asp
http://www.pandasoftware.com/activescan/
http://www.kaspersky.com/scanforvirus

Be sure and put a check in the box by "Auto Clean" before you do the scan. If it finds anything that it cannot clean have it delete it or make a note of the file location so you can delete it yourself.

Popular Forums

icon
Computer Newbies 10,686 discussions
icon
Computer Help 54,365 discussions
icon
Laptops 21,181 discussions
icon
Networking & Wireless 16,313 discussions
icon
Phones 17,137 discussions
icon
Security 31,287 discussions
icon
TVs & Home Theaters 22,101 discussions
icon
Windows 7 8,164 discussions
icon
Windows 10 2,657 discussions

SMART HOME

This one tip will help you sleep better tonight

A few seconds are all you need to get a better night's rest.