Casper Virus
rmartin
Do you have information on how does Casper virus work and how can I
efficiently remove it?
Graham Cluley
> Do you have information on how does Casper virus work and
> how can I efficiently remove it?
Which anti-virus told you you were infected? Have top-notch anti-viruses
like Dr Solomon's FindVirus, Frisk's F-Prot for DOS, or AVP confirmed the
infection? Have you considered the possibility that it may be a false
alarm?
Give us some more details and we should be able to help more.
--
Graham Cluley, gcl...@uk.drsolomon.com Dr Solomon's AntiVirus (DSAV)
UK Support: sup...@uk.drsolomon.com UK Tel: +44 (0)1296 318700
US Support: sup...@us.drsolomon.com US Tel: 781 273 7400
CompuServe: GO DRSOLOMON Web: http://www.drsolomon.com
Get your US retail Win95 online update: http://antivirus.drsolomon.com
rmartin
I have use the last McAfee Antivirus ver 3.0.2.
I know there is something wrong going around my network, because suddenly
different PC's (W95 and NT Servers) started having general protection
failures which desconnected them from the network.
Help is very appreciated.
"Graham Cluley" wrote in article <6aq9qn$crn$1...@chlorine.compulink.co.uk>...
Michael Hitchcock
rmartin wrote in message <6aqagd$3op$1...@diana.bcn.ibernet.es>...
>I have use the last McAfee Antivirus ver 3.0.2.
The latest version of VirusScan is 3.14, not 3.02.
>I know there is something wrong going around my network, because suddenly
>different PC's (W95 and NT Servers) started having general protection
>failures which desconnected them from the network.
The GPFs you are experiencing are probably not related to a virus infection.
There are a number of reasons you can receive the "traces of [virus] in
memory" message, and most of them are not due to an actual virus infection.
Double-check to see if the message in quotes above is the one that you are
seeing.
One cause of this message would be that you tried to update VirusScan
DAT files with the incorrect version of the virus database. You must use
DAT-97XX.ZIP to update VirusScan 2.x programs, and you must use DAT-3XXX.ZIP
to update your 3.x virus database. Go to Help/About in the VirusScan program
to see if you have mismatched DAT files to go with your program.
Another option is that you may actually have an image of this virus in
memory. Do a clean boot scan (instructions are located in the VirusScan95
FAQ - you can obtain this from our automated email response system at
sup...@mcafee.com), and if the scan from a clean boot diskette does not
detect a virus, then your computer does not have an active virus.
Mike Hitchcock
Network Associates Online Support
=================================================================
Network Associates - The Leader in Network Security and Management
Tech Support - 888-VIRUS-NO WWW - http://www.nai.com
BBS - 408.988.4004 FTP - ftp.mcafee.com
CIS - GO MCAFEE AOL - keyword MCAFEE
TECH SUPPORT ON THE WEB !!!! - http://talkaway.mcafee.com
Graham Cluley
> I have use the last McAfee Antivirus ver 3.0.2.
Sounds like a false alarm. Double-check by running Dr Solomon's
FindVirus, Frisk's F-Prot for DOS, or AVP. If you're genuinely infected
they'll tell you - but I don't believe you are.
> I know there is something wrong going around my network, because
suddenly
> different PC's (W95 and NT Servers) started having general protection
> failures which desconnected them from the network.
That's probably not connected with the false alarm.
> Help is very appreciated.
Three things you can do:
1) Live with the false alarm
2) Upgrade to a new version of McAfee which doesn't include that false
alarm
3) Use a different anti-virus
Hope that helps.
--
Graham Cluley, gcl...@uk.drsolomon.com Dr Solomon's AntiVirus (DSAV)
UK Support: sup...@uk.drsolomon.com UK Tel: +44 (0)1296 318700
US Support: sup...@us.drsolomon.com US Tel: 781 273 7400
CompuServe: GO DRSOLOMON Web: http://www.drsolomon.com
Dr Solomon AntiVirus Win3/Win95 updates:http://antivirus.drsolomon.com