On Tue, 23 Mar 2004 13:33:25 -0600, randy <cryoOfan DeleteThis @mylinuxisp.com>
wrote:
>I downloaded the f-prot trial version onto my winxp home version
>computer. It came up with a temporary internet file CANEW33H.HTM
>which is supposed to be in the temporary internet
>files\content.IE5\WPSN07M9 directory, and said it was infected with
>the redlof virus, which F-prot says it cannot yet disinfect this
>virus.
If you read up on Redlof, you'll see it's safe to deactivate by
renaming away. So instead of asking F-Prot for DOS to disinfect, ask
it to auto-rename. As usual, save the result as a log file.
>But I cannot even find the content.IE5/WPSN07M9 directory folder!
It's hidden; Windows won't show it to you. Just about any DOS file
manager will show it to you via DOS mode, tho.
>a search the parent directory does not show the CANEW33H.HTM file, and
>even when I turn on the "show hidden files" feature, nothing shows up.
See above. Don't try and do this inside Windows, and turn off the
wretched "View As Web Page" junk (which is what Redlof uses)
>What should I do?
Formal virus check, rename away what it can't clean, always save logs.
Also, read up what's detected in
www.f-secure.com/v-descs or similar.
>-------------------- ----- ---- --- -- - - - -
Running Windows-based av to kill active malware is like striking
a match to see if what you are standing in is water or petrol.
>-------------------- ----- ---- --- -- - - - -