UPDATE - Surviving BADTRANS.B (Computer Associates InoculateIT Personal Edition)

Name: karenuk

Hello doyoo user, You have to be logged in to use these functions... Login or register Close window

Send message to member

Product:	Computer Associates InoculateIT Personal Edition
Date:	31/01/01 (87 review reads)
Rating:

Advantages: free, reliable, unobtrusive, it works !!

Disadvantages: didn't pick up BADTRANS.B

UPDATE!!

Finally got rid of the virus my PC had, it took 4 days to eradicate it and yes, I had anti-virus software (see below), but it didn't pick it up. We've now got PC-Cillin instead.

This virus is prolific at the moment, so be careful for it, it comes in attachments ending in .scr or .pif or .url.

It's called BADTRANS-B, this is different to the A version which came out in April.

If you get infected, you need to check out these websites :

www.pchell.com
www.antivirus.com - look for WORK_BADTRANS.B in Trend Micro Virus Enclyclopedia

then you can do an online virus scan (free) at
http://housecall.antivirus.com/housecall/start _corp.asp

I had to manually delete files, then run housecall, but it took a couple of attempts to get rid of it.
You need to delete C:\WINDOWS\SYSTEM\CP_25389.NLS
(This is in Find - Files & Folders)
C:\WINDOWS\SYSTEM\KERNEL32.exe
(This is found by putting REGEDIT in RUN, then looking through this path and deleting the file - HKEY_LOCAL_MACHINE>SOFTWARE>MICROSOFT>WINDOWS>CURR ENT VERSION>RUNONCE
Another file to delete is
C:\WINDOWS\SYSTEM\kdll.dll
In the end, I had to delete them by restarting the computer in MS-DOS mode and typing in DEL before each path (C:\WINDOWS\SYSTEM etc.)

then download the free 30-day trial of PC-Cillin at
www.antivirus.com/pc-cillin/download/download. asp

InoculateIT did NOT pick it up!

ORIGINAL OPINION :

InoculateIT saved our computer from two viruses yesterday. First of all, my partner opened an attachment on a newsgroup which contained the Happy99.exe virus. How did he find out? Well, not by the computer crashing, losing vital information, but by a little box popping up saying InoculateIT had discovered the virus and had deleted it off the computer. Huge sigh of relief there.

Then I got on the computer and received an apparently blank email
with an attachment called ZIPPED_FILES.exe. I am usually very cautious about opening attachments, but it came from someone I knew from a list and I hadn't heard of a virus with that particular exe file. I opened it and once again, InoculateIT came to the rescue. It was a virus, it had been safely removed from our computer. Phew.

We have had InoculateIT on our computer for a few months now. We previously had Norton, but it caused us some problems and we had problems uninstalling it. So my partner wasn't too keen to download anything else, but after a few battles with the kak.hta worm virus, he agreed it was a good idea.

Another friend had recommended InoculateIT, with its main attraction being it was FREE. I was expecting some catch to that, but it downloaded okay, albeit slowly (14.4 Modem - sigh). It sits nicely in the background, checking a hundred random files on opening, then you can ask it to check the whole computer or particular files on demand. Easy. Even I know how to work it.

A couple of days ago, the software informed us we need to download updates from the website. These too are free. Go to the website :

http://antivirus.cai.com

Incidentally, to get rid of the kak.hta worm virus (one of the most prolific viruses around), you can go to the link below and download the fixkak.exe which is also excellent and free.

http://www.sarc.com/avcenter/venc/data/wscript .kakworm.fix.html

In this Winter time, we are all fed-up of the common cold, a virus we can't cure. Let's just be pleased that our computer encounters viruses we can cure. Download InoculateIT and breathe easier... most of the time!

Summary: