Windows found a virus - Need help

Windows found a virus known by th e following names
Win32/Apropos.B
WinNT/Zufyx.A
Spyware.Apropos.C
Trojan.Win32.Crpt.t

I have Mcafee security center but it didn't pick it up even when I ran
viruscan, windows suggests I download the protection scan in safemode but
will it interfer with mcafee?

From: "pat" <pat@discussions.microsoft.com>

| Windows found a virus known by th e following names
| Win32/Apropos.B
| WinNT/Zufyx.A
| Spyware.Apropos.C
| Trojan.Win32.Crpt.t
|
| I have Mcafee security center but it didn't pick it up even when I ran
| viruscan, windows suggests I download the protection scan in safemode but
| will it interfer with mcafee?

There are anti virus News Groups specifically for this type of discussion.

microsoft.public.security.virus
alt.comp.virus
alt.comp.anti-virus


Two part reply..

Perform Part 1 and then perform Part 2.

Use the alternate if the first two parts are ineffective...
Note: Alternate only for Win2K, WinXP and Win2003 Server

Part 1
-----------

Use noahdfear's SmitFraud and SpyAxe removal tool -- SmitRem.exe
http://noahdfear.geekstogo.com/click...click.php?id=1

http://www.bleepingcomputer.com/forums/topic36868.html


Part 2
-----------

Download SmitFraud.exe from the URL --
http://www.ik-cs.com/programs/virtools/SmitFraud.exe

Execute; SmitFraud.exe { Note: You must accept the default of C:\McAfee }
Choose; Unzip
Choose; Close

NOTE: You may have to disable your software FireWall or allow WGET.EXE to go through your
FireWall to enable WGET.EXE to download the needed McAfee related files.

Execute; c:\mcafee\clean.bat
{ or Double-click on 'Clean Link' in c:\mcafee }

A final report in HTML format called C:\mcafee\ScanReport.HTML will be generated. At the
end of the scan, it will be displayed in your browser (Opera, FireFox or Internet Explorer).
It is suggested that you move the report out of c:\mcafee before performing another scan.

Alternate:

Secured2K's SpyAxe, PSGuard, Smitfraud, Sinnaka and Alemod removal tool.

http://secured2k.home.comcast.net/tools/AntiPuper.exe

http://forums.mcafeehelp.com/viewtopic.php?t=65072


* * * Please report back your results * * *


--
Dave
http://www.claymania.com/removal-trojan-adware.html
http://www.ik-cs.com/got-a-virus.htm

pat wrote:
>
> Windows found a virus known by th e following names Win32/Apropos.B
> WinNT/Zufyx.A Spyware.Apropos.C Trojan.Win32.Crpt.t
>
> I have Mcafee security center but it didn't pick it up even when I
> ran viruscan, windows suggests I download the protection scan in
> safemode but will it interfer with mcafee?
>
What David said. In addition 'Windows' cannot find viruses. You must
have an anti-Virus program of some sort.

Cheers,

Cliff

"Enkidu" <enkidu.com@com.cliffp.com> wrote...

> pat wrote:
>>
>> Windows found a virus known by th e following names Win32/Apropos.B
>> WinNT/Zufyx.A Spyware.Apropos.C Trojan.Win32.Crpt.t
>>
>> I have Mcafee security center but it didn't pick it up even when I
>> ran viruscan, windows suggests I download the protection scan in
>> safemode but will it interfer with mcafee?
>>
> What David said. In addition 'Windows' cannot find viruses. You must
> have an anti-Virus program of some sort.
>
> Cheers,
>
> Cliff

Cliff,

I wonder if the original poster is referring to the new Microsoft 'Windows
Live Safety Center" scan which will identify viruses on a PC but not repair
them. See

<http://safety.live.com/site/en-US/default.htm>

I, too, found that this scanner reports that one of my PCs contains a
virus but my Norton's AV doesn't find it and the online Symantec virus scan
doesn't either.

Craig

PS--If you plan to use this Windows Live Safety Center scanner, it's best to
go into your AV program's quarantine area and delete the viruses stored
there before running the scan.

Hey I got the same thing, now it wasn't windows, but it was Microsoft's
Online Crash Analysis. It suggests going to an internet site in safe mode.
One problem, you can't access the internet in safe mode. My question is, is
there anywhere else I can find this program? It says the virus can only be
detected in safe mode, does that mean I have to use the Windows Live Safety
center, or can I use my own virus detector in safe mode?

"pat" wrote:

> Windows found a virus known by th e following names
> Win32/Apropos.B
> WinNT/Zufyx.A
> Spyware.Apropos.C
> Trojan.Win32.Crpt.t
>
> I have Mcafee security center but it didn't pick it up even when I ran
> viruscan, windows suggests I download the protection scan in safemode but
> will it interfer with mcafee?

From: "KingBoredom" <KingBoredom@discussions.microsoft.com>

| Hey I got the same thing, now it wasn't windows, but it was Microsoft's
| Online Crash Analysis. It suggests going to an internet site in safe mode.
| One problem, you can't access the internet in safe mode. My question is, is
| there anywhere else I can find this program? It says the virus can only be
| detected in safe mode, does that mean I have to use the Windows Live Safety
| center, or can I use my own virus detector in safe mode?
|


Two part reply..

Perform Part 1 and then perform Part 2.

Use the alternate if the first two parts are ineffective...
Note: Alternate only for Win2K, WinXP and Win2003 Server

Part 1
-----------

Use noahdfear's SmitFraud and SpyAxe removal tool -- SmitRem.exe
http://noahdfear.geekstogo.com/click...click.php?id=1

http://www.bleepingcomputer.com/forums/topic36868.html


Part 2
-----------

Download SmitFraud.exe from the URL --
http://www.ik-cs.com/programs/virtools/SmitFraud.exe

Execute; SmitFraud.exe { Note: You must accept the default of C:\McAfee }
Choose; Unzip
Choose; Close

NOTE: You may have to disable your software FireWall or allow WGET.EXE to go through your
FireWall to enable WGET.EXE to download the needed McAfee related files.

Execute; c:\mcafee\clean.bat
{ or Double-click on 'Clean Link' in c:\mcafee }

A final report in HTML format called C:\mcafee\ScanReport.HTML will be generated. At the
end of the scan, it will be displayed in your browser (Opera, FireFox or Internet Explorer).
It is suggested that you move the report out of c:\mcafee before performing another scan.

Alternate:

Part 1
-----------

Secured2K's SpyAxe, PSGuard, Smitfraud, Sinnaka and Alemod removal tool.

http://secured2k.home.comcast.net/tools/AntiPuper.exe

http://forums.mcafeehelp.com/viewtopic.php?t=65072


Part 2
-----------

Swandog46's Apropos Adware/RootKit remover
http://swandog46.geekstogo.com/aproposfix.exe


* * * Please report back your results * * *


--
Dave
http://www.claymania.com/removal-trojan-adware.html
http://www.ik-cs.com/got-a-virus.htm