Start a Conversation

Unsolved

This post is more than 5 years old

M

4831

November 8th, 2005 15:00

netsky virus

I am getting a w32.netsky.p@mm!enc virus that won't go away! When I run the antivirus it tells me that access is denied to the file it is in and can't delete it.  I can not receive my email either.  I receive the following message:
Task 'mail.signsfirst.net - Receiving' reported error (0x800CCC0F) : 'The connection to the server was interrupted.  If this problem continues, contact your server administrator or Internet service provider (ISP).'   
 
I have checked all my settings and everything is ok, help! What can I do to get my email?

3 Apprentice

 • 

15.2K Posts

November 8th, 2005 16:00

have you tried the Symantec "dedicated" netsky tool?
 
 
 

17 Posts

November 8th, 2005 18:00

Tried the tool - it runs for a few minutes and then I get an error message.  Any other suggestions?

3 Apprentice

 • 

15.2K Posts

November 8th, 2005 18:00

if you indicate what the error message said [specifically/exactly], that might be helpful to diagnose your problem.
 
when all else fails, there's always HiJackThis:
 
Download the latest version of HJT(hijackthis) (version 1.99.1) from

http://majorgeeks.com/download3155.html

you must create a separate folder and place it there.... people commonly use C:\HJT.   Note:  Please do *NOT* use a TEMP (temporary) folder, *NOR* your DESKTOP, as HJT will be generating log files and backup files in the folder from which it is run... you risk accidentally losing these if you use a TEMP folder, and you will generate extreme clutter if you use your DESKTOP.

The file above comes as a compressed .ZIP file... you have to UNzip it (hopefully, you have an UNzip utility built into your Windows Explorer.   If for any reason, you're unable to UNzip it, you can download the already-unzipped .EXE file from http://downloads.malwareremoval.com/HijackThis.exe )

After Unzipping, double click on HiJackThis.EXE

Click on  Do a System Scan and Save a LogFile

This will automatically open NotePad

Copy the entire file from NotePad:  EDIT/SelectAll, EDIT/Copy

Then go to the new forum dedicated for HiJack This logs (**NOT** back here), and  PASTE the results there:

http://forums.us.dell.com/supportforums/board?board.id=si_hijack

Be sure to include a detailed description of any problems/errors/warnings you are encountering.

Hopefully, one of the HJT experts will get to it as quickly as possible.

 

WARNING:  HiJack This is a VERY POWERFUL tool.  Do *NOT* do anything else (in particular, do NOT use it to delete any entries) until you are advised to do so!!   Improper use of this tool can severely damage your system.
 
 
Supplemental note:  The procedure as worded above has been carefully edited over time, so as to expedite the process of helping people.   Nevertheless, it seems that many individuals try to be "creative", and make some variations.  It really would be to your benefit if you follow these directions EXACTLY as stated... because certain changes on your part can result in slowing-down the help process. 
Specifically, the following are 3 very common BAD deviations which will cause delays:
a)  BAD:  using an older/outdated version of HiJackThis...
The experts only work with the current version.   So if you make a post with an older version, you'll simply be advised to get the latest version, re-run it, and re-post your log.
b) BADusing a TEMP directory or your DESKTOP for HJT....
Some experts may insist you move HJT before they'll begin working with you.   Others will start the repair process, advising you to move HJT as one of the very first steps.   Failure to do so can result in losing potentially critical information.   So please,  just use the suggested  C:\HJT  directory, rather than try to be creative.
c) BAD:  posting your log in the wrong forum...
if you post your log back here, in the Virus/SpyWare forum, it will "sit idly", either until the forum moderator gets around to move it for you... or until you decide to repost your log...  in the HiJackThis forum.

4 Posts

November 10th, 2005 17:00

I had the same problem.  Turn off the system restore and then reboot the computer and run the virus scan.   After it deletes the virus reboot the computer and turn the system restore back on.

John Cutsinger

Santa Barbara Alpha Hedge Fund

 

17 Posts

November 11th, 2005 13:00

This is the message I get.

 

 

Symantec W32.Netsky FixTool has encountered a problem and needs to close.  We are sorry for the inconvenience.

 

 

EventType : InPageError     P1 : c000009c     P2 : 00000003    

 

 

C:\DOCUME~1\PEGGYC~1\LOCALS~1\Temp\WER65de.dir00\FxNetsky.exe.mdmp

C:\DOCUME~1\PEGGYC~1\LOCALS~1\Temp\WER65de.dir00\appcompat.txt

 

3 Apprentice

 • 

15.2K Posts

November 11th, 2005 13:00

mrs C:
 
just to be sure i understand:
you turned off system restore, THEN ran the FxNetsky tool, and the error message was generated (while system restore was off)??
 
I see you've posted your HJT log, and you've gotten a response (in the form of a question/clarification) from RKinner here:
 
 
at this point, i would strongly advise you to keep all your work in THAT thread, by REPLYing there each time, until your problem is fully resolved.

17 Posts

November 11th, 2005 13:00

MaddCutty,

I have turned off the system restore and tried that before anything else the problem is that the anti-virus won't / can't heal/destroy the virus it tells me I don't have acess to the file. :smileymad:

No Events found!

Top