Over the years I've been very careful about malicious attacks and I am
currently using Symantec.
I've been attacked and Symantec detected it and lists the following virus'
Trojan.BAT
hacktool.dos
IRC.Trojan
Files are created in \windows\java and \winnt\system32\certsvr and my
registry is modified to run some batch files (vv.bat?) which contains a load
of net stop commands to kill off any anti-virus software...other
applications like KAMMI.EXE are also installed.
Symantec says they are detected and quarantined but somehow these files
still get in and my registry modified.
Somehow, there is a door that's open on my PC allowing these attacks to
happen and I do not know how to find or close the door.
Whilst online, Symantec can trigger 3-4 times with these attacks, each
attack reporting 15 files detected with virus'
Anyhelp help.suggestions welcomed.
(I've booted into safe mode and deleted all these files but they still keep
coming back)
FAQ
Profile
Private Messages
Log in
