New User? Need help? Click here to register for free! Registering removes the advertisements.

Computer Cops
image image image image image image image image
Donations
If you found this site helpful, please donate to help keep it online
Don't want to use PayPal? Try our physical address
image
Prime Choice
· Head Lines
· Advisories (All)
· Dnld of the Week!
· CCSP News Ltrs
· Find a Cure!

· Ian T's (AR 24)
· Marcia's (CO8)
· Bill G's (CO12)
· Paul's (AR 5)
· Robin's (AR 2)

· Ian T's Archive
· Marcia's Archive
· Bill G's Archive
· Paul's Archive
· Robin's Archive
image
Security Central
· Home
· Wireless
· Bookmarks
· CLSID
· Columbia
· Community
· Downloads
· Encyclopedia
· Feedback (send)
· Forums
· Gallery
· Giveaways
· HijackThis
· Journal
· Members List
· My Downloads
· PremChat
· Premium
· Private Messages
· Proxomitron
· Quizz
· RegChat
· Reviews
· Google Search
· Sections
· Software
· Statistics
· Stories Archive
· Submit News
· Surveys
· Top
· Topics
· Web Links
· Your Account
image
CCSP Toolkit
· Email Virus Scan
· UDP Port Scanner
· TCP Port Scanner
· Trojan TCP Scan
· Reveal Your IP
· Algorithms
· Whois
· nmap port scanner
· IPs Banned [?]
image
Survey
How much can you give to keep Computer Cops online?

$10 up to $25 per year?
$25 up to $50 per year?
$10 up to $25 per month?
$25 up to $50 per month?
More than $50 per year?
More than $50 per month?
One time only?
Other (please comment)



Results
Polls

Votes: 1211
Comments: 21
image
Translate
English German French
Italian Portuguese Spanish
Chinese Greek Russian
image
 Forum FAQForum FAQ   SearchSearch   UsergroupsUsergroups   ProfileProfile   Login to check your private messagesLogin to check your private messages   LoginLogin   Your Favorite ForumsFavForums 

purola_worm Can anyone help?

 
Post new topic   Reply to topic       All -> FavForums -> General Site
View previous topic :: View next topic  
Author Message
Zappa333

Cadet
Cadet



Joined: Apr 29, 2004
Posts: 5
Location: New_Zealand

PostPosted: Fri Apr 30, 2004 12:32 am    Post subject: purola_worm Can anyone help?
Reply with quote

We have just located a purola_worm in A0104913.cpy file. I have turned the restore option off and this has solved 90% of the problem. But now I am hunting for a program to delete this worn off our system. Can anyone help?

I did a search on the net and come up with "ArneScroller" and proxomitron as possible programs to use. But in trying to download or sort out I have just got more confused. Has anyone got a simple sure fire way of dealing with this problem. Thanks in advance Zappa333
Back to top
View users profile Send private message
Prince_Serendip

AVPE Host
Premium Member
Premium Member


Joined: Sep 07, 2002
Posts: 1026
Location: Canada

PostPosted: Fri Apr 30, 2004 2:23 am    Post subject:
Reply with quote

Purola is fairly new so you won't find much on it. It's named after a venereal disease, a worm. Wink

Proxomitron cannot help you to clean it. It just rewrites the webpages you view.

Please post a HijackThis Log so we can see what needs to be done.

Please follow these directions:

From Computer Cops get the Direct-Download of HijackThis. It's zipped.

Unzip the download (using a piece of software like Winzip). Create a folder in My Documents and unzip HijackThis into the new folder and run it from there. Do not run HijackThis from your desktop or a Temp folder as these do not allow HijackThis to save the changes it makes.

Doubleclick on HijackThis.exe from the unzipped archive and press the "Scan" button.

When the scan is finished, the "Scan" button will change into a "Save Log" button. Press this button, and save the log to the same folder as HijackThis.

IMPORTANT NOTE: Most of what HijackThis lists will be harmless or even required, so do NOT fix anything yet.

Next, go to the Spyware-HijackThis Forum or Viruses, Worms, Trojans Oh My and press "New Topic".

Be specific in explaining your issue. Please tell us what you are experiencing on your computer. For example, has it slowed down, getting weird pop-ups, homepage has been changed, etc? Then copy and paste the contents of your entire HijackThis log into your new topic thread.

Open the Log with Wordpad (for example), Press Ctrl + A to highlight all, then Press Ctrl + C to copy it. To put it in your post, position the cursor on the page and press Ctrl + V.

Our experts here will be happy to help you analyze the results.

Best regards and Welcome to Computer Cops! Very Happy

So how did I get infected in the first place?

PLEASE READ THESE BEFORE YOU POST:

Computer Cops: Virus - Worm Related: Posting Guidelines

Computer Cops: Spyware - HijackThis: Posting Guidlines

You can post your log to this thread. Wink

_________________
ASAP Expert | Please donate to Computer Cops!
Back to top
View users profile Send private message
Display posts from previous:   
Post new topic   Reply to topic       All -> FavForums -> General Site All times are GMT - 5 Hours
Page 1 of 1

 
 
Jump to:  
You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum
You cannot attach files in this forum
You can download files in this forum


Powered by phpBB 2.0.8a © 2001 phpBB Group

Version 2.0.6 of PHP-Nuke Port by Tom Nitzschner © 2002 www.toms-home.com
Version 2.2 by Paul Laudanski © 2003-2004 Computer Cops