Results 1 to 9 of 9

Thread: Same viruses keep appearing

Hybrid View

  1. #1
    katiebuglove Guest

    Default Same viruses keep appearing

    My computer started acting up a few days ago and it got so serious that I had to do a system restore from backup disks. It went okay and I reinstalled ZASS. I did a scan and 2 viruses showed up in 4 different files; ZA quarantined them. Then things started acting up again, was forced to do another restore. Certain things pointed to Messenger and lsass.exe as possible culprits. I disabled both from msconfig and tried to end process of lsass.exe from Task Manager but it wouldn't let me. Anyway, things went better on the last restore, got ZASS up and running, did another scan and the ziruses are still there, quarantined of course, but still....

    They are:
    Net-Worm Win32 Kolab.dwx on C:\WINDOWS\System\lsass.exe
    Net-Worm Win32 Kolab.dwx on C:\WINDOWS\System32\67.scr
    Net-Worm Win32 Kolab.dwx on C:\WINDOWS\System32\...Temp Internet FIles
    Backdoor Win32 IRCBot.jsm on C:\WINDOWS\System32\drivers\sysdr32.sys

    While I was running Windows updates, I got messages on both 67.scr and lsass.exe that there was a problem and needed to shut down.

    Any help at all is appreciated.

    ZoneAlarm Security Suite version:9.3.037.000
    TrueVector version:9.3.037.000
    Driver version:9.1.522.000
    Anti-virus engine version:8.0.2.48
    Anti-virus signature DAT file version:1043434432
    AntiSpam version:6.0.0.2383
    ZoneAlarm Browser Security 1.5.152.14
    ZoneAlarm ForceField Spyware Scanner 1.5.53.209
    ZoneAlarm ForceField Anti-Phishing Database 1.2.104.0
    ZoneAlarm ForceField Spyware Sites Database 04.130

  2. #2
    Join Date
    Nov 2004
    Location
    localhost
    Posts
    17,290

    Default Re: Same viruses keep appearing

    Hi!
    please follow ALL steps as suggested here:
    Malware Clean-up Guidance

    Fax

    Click here for ZA Support
    Monday-Saturday 6am to 10pm Central time
    Closed Sundays and Holidays

  3. #3
    katiebuglove Guest

    Default Re: Same viruses keep appearing

    I followed your Malware Clean-up Guidance but not sure things went as they should. Here's what happened. I'm wondering if this is all normal:

    I did steps 1 - 3 and when I went to do a manual scan the firewall looked like it was still on. I didn't turn it off or mess with it at all.

    Then a window popped up and gave me two choices of scans: Quick or Deep (not Super Scan) and then auto-updated my A/V.

    I went into A/V - Advanced Options and "Quick" was checked. I set to to Super and did a scan. It finished and didn't show any malware. Then it auto-updated my A/V again.

    I rebooted in Normal and that's where I am now. I don't want to go any further until I can determine if things went as they should have.

    Thanks for all your help here. I do appreciate it.

    P.S. Should have said that I left the viruses quarantined and after reboot into Normal, they still show in quarantine. Is this normal?
    Last edited by katiebuglove; January 20th, 2011 at 08:09 AM. Reason: Forgot something

  4. #4
    Join Date
    Nov 2004
    Location
    localhost
    Posts
    17,290

    Default Re: Same viruses keep appearing

    Yes, looks normal... go on with the other steps..
    The fact that ZA quarantined the infections it means it did its job and you are secured.

    Now you need to go on to find any other left over of the infection (if any).

    Cheers,
    Fax

    Click here for ZA Support
    Monday-Saturday 6am to 10pm Central time
    Closed Sundays and Holidays

  5. #5
    katiebuglove Guest

    Default Re: Same viruses keep appearing

    So, to make sure I understand (I know you do!):

    The fact that I left the viruses quarantined before going into Safe Mode
    The fact that the firewall appeared on after Safe Mode
    The fact that scan mode defaulted to Quick and I had to re-select Super Scan after going into Safe Mode
    The fact that the viruses are still in quarantine (3 days now) after Normal boot

    This is all okay?

    And when I did Step 3: Manual run ZA:

    To do the manual scan, I had to open ZASS. Really, really stupid question: Should there have been an option somewhere to do a scan without opening up the program (maybe, thus, turning on firewall inadvertantly?)

    I know you probably have bigger fish to fry and I thank you for the time you put in with the little fish.

  6. #6
    Join Date
    Nov 2004
    Location
    localhost
    Posts
    17,290

    Default Re: Same viruses keep appearing

    Yes... all fine
    You had to open ZA manually? Yes, normal... Was already there in the tray... yes, could also be.

    Click here for ZA Support
    Monday-Saturday 6am to 10pm Central time
    Closed Sundays and Holidays

Thread Information

Users Browsing this Thread

There are currently 1 users browsing this thread. (0 members and 1 guests)

Similar Threads

  1. Setup wizard keeps appearing on bootup
    By deanmc in forum ZoneAlarm Installation
    Replies: 5
    Last Post: March 2nd, 2009, 02:05 AM
  2. Errors appearing in A/v log
    By swampfox in forum ZoneAlarm Anti-virus & Anti-spyware
    Replies: 0
    Last Post: July 15th, 2008, 07:06 PM
  3. nytimes.com only partially appearing
    By mariko75 in forum Anti-spam & Parental Controls
    Replies: 5
    Last Post: August 12th, 2007, 06:43 AM
  4. How do I stop ad. appearing in new tab
    By bsw in forum Anti-spam & Parental Controls
    Replies: 3
    Last Post: April 24th, 2007, 05:52 AM

Bookmarks

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •