CDROM-Guide forums

Go Back   CDROM-Guide forums > Main Forums > Open to All Computer Related Topics > Computer Networking & Security
FAQ Calendar Mark Forums Read
Open   CSec   Data   DevDrv   CoOp   Audio   CDRW   CDG   VCD   DVD   HD DVD   Mac   VGB   PS2   DC   Xbox  


 
 
Thread Tools Display Modes
  #1  
Old Oct 08, 2002, 10:42 PM
jmebonner jmebonner is offline
Senior Member
 
Join Date: Mar 2001
Location: Kansas
Posts: 330
Default A stinkin' virus prob! I need help plz!

sponsored links

 
I know. I know, I shouldn't have been w/out an AV program. But I was, and now that I've put one back on, it's found some sort of virus. star.ww or something, and it was in a file called loadpe.com. It quarantined this file and now it won't open and I can't get into any applications. It's a pain!
Can anyone help, my AV said it can't fix it even though I just ran liveupdate from symantec.
Any help would be greatly appreciated!
Thanks,
James
  #2  
Old Oct 08, 2002, 11:04 PM
jmebonner jmebonner is offline
Senior Member
 
Join Date: Mar 2001
Location: Kansas
Posts: 330
Default

Stator virus is what it is, not star, and I can't even open wordpad or anything to modify the regedit file like someone has said to do, is there a removal tool anyone knows of?
  #3  
Old Oct 08, 2002, 11:36 PM
backup2k1 backup2k1 is offline
Veteran
 
Join Date: Apr 2001
Location: england,east sussex,canada
Posts: 1,741
Default

hi m8 not sure if this will help you out a bit
but it sounds like the sircam virus
have a look at this site
if u done a boot up disk for nortons virus protector just load that up in dos
and it will show it there and alter it back how the pc was
have u tried to get rid of it by booting the pc up in safe mode
that might work
it changes all your files over so i dont think nortons will pick it up
try and load another virus protector up onto the pc if none of this works




backup2k1


***********.tech-pro.co.uk/index.html

***********.sophos.com/virusinfo/****yses/w32stator.html


***********.symantec.com/avcenter/venc/data/w32.stator@mm.html


***********.night-internet.com/ (program here to get rid of it )

***********.grisoft.com/html/us_index.htm?session=501ca73d2814fedce637b9851558e 065 (free virus protector)




W32/Stator spreads by email as an attachment named photo1.jpg.pif. When it is run it renames several EXE files in the Windows directory to .VXD and replaces them with copies of itself. It creates copies of itself named loadpe.exe and scanregw.exe in the Windows system directory and alters the registry entry HKLM\Software\Classes\exefile\shell\open\command to include the full path of the loadpe.exe file. It adds the registry value "ScanRegistry" containing the full path of the scanregw.exe to the registry key HKLM\Software\Microsoft\Windows\CurrentVersion\Run Services. Once the virus has installed itself onto a computer it displays an image of a young woman.

Last edited by backup2k1; Oct 08, 2002 at 11:41 PM.
  #4  
Old Oct 09, 2002, 03:08 AM
Lazza Lazza is offline
suspended
 
Join Date: Nov 2001
Posts: 4,789
Default

Moving to Computer Security......
 

Thread Tools
Display Modes

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is Off


Similar Threads
Thread Thread Starter Forum Replies Last Post
<<<<<<<<<Novarg Virus - Read In>>>>>>>>>> gooner Open to All Computer Related Topics 4 Jan 27, 2004 08:37 PM
ps2 playback prob help plz :) wheelie DVD 0 Feb 13, 2003 08:07 AM
cd drive prob, plz help! Francesca_s Open to All Computer Related Topics 5 Sep 19, 2002 03:38 PM
dvd5 prob plz help sc0tsman DVD 5 Jul 14, 2002 11:21 AM
virus - help plz bawheid Open to All Computer Related Topics 2 May 23, 2002 04:36 AM


All times are GMT -5. The time now is 09:19 PM.



Powered by vBulletin® Version 3.8.4
Copyright ©2000 - 2017, Jelsoft Enterprises Ltd.
Copyright 1996-2009 CDROM-Guide.com. All rights reserved