Firefox 2.0.0.11 messed up!

[hoom]

Thats my experience. Maybe they have since fixed it?
Ah, could be the Norton firewall rather than AV
Customers go 'can't access secure websites' & we go 'do you have an expired Norton' & they go 'yes' we tell them to renew or uninstall Norton & presto secure websites work again.

 

[Bouncing Zabaglione Bros.]

There was a classic story of a virus that targeted a loophole in Symantec on a Thursday, because the author knew that Symantec only updated on Wednesdays, so he would have a week to wreak mayhem before the loophole was closed.

 

[Bludd]

Except that Symantec doesn't. I get new updates almost every 24h when I run LiveUpdate..

 

[Bouncing Zabaglione Bros.]

Except that Symantec doesn't. I get new updates almost every 24h when I run LiveUpdate..

Yeah, I wonder why they changed it?

Kaspersky gives me new updates every few hours, and I'm not paying extra for corporate products - that's the service they give to standard home users too.

 

[Bludd]

That's pretty cool. Is it automated or do you have to run it manually?

 

[Bouncing Zabaglione Bros.]

That's pretty cool. Is it automated or do you have to run it manually?

It's automated. They have this flash feature where they can adjust the update duration depending on virus activity across the world, so if something dramatic is up (like Nimda or Red Alert) they can use an update to tell your AV it should be updating more frequently. Right now it's updating every few hours on automatic, but Kaspersky could make it pick up every hour if they wanted to.

You can also manually update or change the update frequency yourself.

 

[Bludd]

Cool, I'll check out Kaspersky some time.

 

[Bouncing Zabaglione Bros.]

Cool, I'll check out Kaspersky some time.

They do downloadable one month trials of their products, and they have some good prices on at the moment until Christmas. Kaspersky Anti Virus is their AV product, Kaspersky Internet Security has the AV, firewall, anti-hacker, kitchen sink type of product.

 

[Bludd]

I'm only interested in the AV since my personal firewall from Outpost is just completely awesome in almost all respects. The only issue I have with it is that I think it uses too many kernel mode drivers.

 

[mito]

NEWS UPDATE!!!

After I rebooted my computer, it won't login!

I guess I shouldn't have deleted that file after all. (unsrvc.exe)

After I put in my password windows logs me off and that's it.

No Safe mode, prompt mode, recovery, etc. etc.

Gonna have to use Hiren's Boot CD to fix WIndows.

 

[Bludd]

Are you sure you didn't delete userenv.dll by mistake?

 

[mito]

100% sure...

unsrvc.exe

 

[Bludd]

Sounds like you are more infected than you thought. You removed just a part of the malware and since it can't find the file you deleted, it won't start windows. I bet it changed the userinit.exe too.

Try to do a repair install.

 

[Bouncing Zabaglione Bros.]

If you have access to a clean machine, you should consider installing Kaspersky AV (you can get a 30 day functional demo from their website), and install PE Builder. With this you can make a bootable rescue CD that you can boot into on your infected machine, and run the virus scan without having your boot drive online or your compromised OS running.

Of course, it's possible that critical windows components are badly infected, and just because an AV removes them it doesn't necessarily give you back a fully functioning windows install.

 

[Bludd]

Yeah, the best thing would be to just nuke the whole install and start over again.

If you need to backup something, be sure to thoroughly scan everything you get from the infected machine.

 

[chavvdarrr]

for 1 time offline scanning I suggest cureit from www.drweb.ru
Never failed me, its a free all-in-one exe with definitions updated to time of the download.
PS: or from here ftp://ftp.drweb.com/pub/drweb/cureit/cureit.exe