Stubborn Virus/Worm Exploit-DcomRpc.gen [Archive] - Glock Talk

PDA

View Full Version : Stubborn Virus/Worm Exploit-DcomRpc.gen


Stephen
12-13-2004, 09:08
Last week I received a call from my uncle who said that his computer was acting weird. Last night I took his laptop home and ran Stinger and found 223 viruses and 5 worms!!!

I restarted Windows and ran Stinger again just to see what was lingering. A virus/worm called Exploit-DcomRpc.gen was still there.

Stinger could not remove this. So I ran AVG. AVG came up with the above referenced item along with 3 or 4 more which were cleaned... but not Exploit-DcomRpc.gen.

I read that I needed to do a Windows update to get the patch(es) for IE so I tried to do this... that's where it got weird.

Active X is needed for both a Windows and McAfee update... I reset the IE settings to allow the Active X but yet it won't work.

Is this due to the Exploit-DcomRpc.gen?

How in the *&^% do I get rid of this virus/worm? How can I get the Active X working again?

This one has me a bit baffled.... ;g

Stephen
12-13-2004, 20:39
I think I have the virus issue solved - any input in the Active X issues???

Washington,D.C.
12-13-2004, 21:11
Open Internet Explorer.. Click Tools > Options > Security > make sure "Internet is highlighted > Custom Level > select "medium" > click Reset > OK > Advanced > Restore Defaults > OK > Close Internet Explorer.

If that doesn't reset things, then you may have a problem with an Anti-Virus or Firewall software interfering. If you are running either, post what brand/version and I'll see what I can find.

The "Advanced" in the instructions above refers to a tab at the top of the window that should be visible after you complete the step directly before it.

Do you still have problems with the windows update site? (windowsupdate.microsoft.com)

Washington,D.C.
12-13-2004, 21:16
This Avast program is like Stinger.It might be a bit more up to date http://www.avast.com/eng/down_cleaner.html

Washington,D.C.
12-13-2004, 21:18
This scanner is like AdAware and Spybot.It's up to date and works well http://www.emsisoft.com/en/software/free/

Washington,D.C.
12-13-2004, 21:19
Run CCleaner and get rid of junk files http://www.ccleaner.com

Washington,D.C.
12-13-2004, 21:25
If it's Windows XP,RegScrubXP 3.25 is the safest registry cleaner for XP I've found http://www.lexundesigns.com/LexunFreeware/index.htm

Stephen
12-14-2004, 14:55
OK - I reset the IE settings (yet again) and still nada. I have downloaded and am running the Avast program right now. I did get 3 scans that came back clean (2 stinger and 1 AVG).

Still no go on the MS Updates page....

Will run Spybot S&D and AdAware after the Avast finishes its routine.

Washington,D.C.
12-14-2004, 14:58
Then try this one http://www.emsisoft.com/en/software/free/ and after that if you want another good scan try this one http://www.webroot.com/

Washington,D.C.
12-14-2004, 15:05
http://www.infinisource.com/techfiles/winup-errors.html

Washington,D.C.
12-14-2004, 15:10
http://computercops.biz/postt68401.html

Stephen
12-15-2004, 14:35
OK I ran a full cocktail of programs and still cannot open up Active X controls...

Any other nuggets of wisdom?!?

Washington,D.C.
12-15-2004, 15:27
Hmmmm,you can try running Scan Disk.I doubt it will help but it might.I'm working on a solution now. http://www.nightsoft.net/effhq/IE.html

Washington,D.C.
12-15-2004, 15:38
http://computercops.biz/postp267950.html

Washington,D.C.
12-15-2004, 19:01
http://www.dougknox.com/xp/tips/xp_ie_reinstall.htm and http://www.theeldergeek.com/repair_reinstall_ie_and_oe_6.htm and http://myitforum.techtarget.com/articles/15/view.asp?id=2413 and http://home.earthlink.net/~lreynol929/ruXP/Internet/REPAIR.HTM and http://sft-cyber.com/IEOut.htm

Stephen
12-16-2004, 08:54
Thanks for all of the research. I was not able to play with the laptop last night - my baby daughter was not feeling well so she took priority (duh).

I will look at this when I get home this afternoon.

Washington,D.C.
12-16-2004, 11:25
http://www.microsoft.com/downloads/details.aspx?FamilyID=1e1550cb-5e5d-48f5-b02b-20b602228de6&displaylang=en

Washington,D.C.
01-06-2005, 16:40
Here's a new fix http://majorgeeks.com/download4467.html

Stephen
01-06-2005, 21:33
Well - I fixed the problem a few days ago - complete reformat and install of XP, MS Office and other goodies.

The machine was too riddled with crap to try and chase down each individual issue.

Seems to be running supurb now.

Thanks for all of the advice, links and information!