<HTML >
<HEAD>
<META http-equiv="Content-Type" content="text/html; charset=us-ascii">
<meta name=Generator content="Microsoft Word 11 (filtered)">
<style>
<!--
/* Font Definitions */
@font-face
{font-family:Tahoma;
panose-1:2 11 6 4 3 5 4 4 2 4;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
{margin:0in;
margin-bottom:.0001pt;
font-size:12.0pt;
font-family:"Times New Roman";}
a:link, span.MsoHyperlink
{color:blue;
text-decoration:underline;}
a:visited, span.MsoHyperlinkFollowed
{color:blue;
text-decoration:underline;}
span.EmailStyle17
{font-family:Arial;
color:navy;}
@page Section1
{size:8.5in 11.0in;
margin:1.0in 1.25in 1.0in 1.25in;}
div.Section1
{page:Section1;}
-->
</style>
</HEAD>
<BODY lang=EN-US link=blue vlink=blue>
<DIV>
<div class=Section1>
<p class=MsoNormal><font size=2 color=navy face=Arial><span style='font-size:
10.0pt;font-family:Arial;color:navy'>Uh…</span></font></p>
<p class=MsoNormal><font size=2 color=navy face=Arial><span style='font-size:
10.0pt;font-family:Arial;color:navy'> </span></font></p>
<div>
<p class=MsoNormal><font size=2 color=navy face=Arial><span style='font-size:
10.0pt;font-family:Arial;color:navy'>Doesn’t the dd you suggest erase the
hard drive completely? </span></font></p>
<p class=MsoNormal><font size=2 color=navy face=Arial><span style='font-size:
10.0pt;font-family:Arial;color:navy'> </span></font></p>
<p class=MsoNormal><font size=2 color=navy face=Arial><span style='font-size:
10.0pt;font-family:Arial;color:navy'>If so didn’t you leave out some
steps like needing to reload XP and the applications?</span></font></p>
<p class=MsoNormal><font size=2 color=navy face=Arial><span style='font-size:
10.0pt;font-family:Arial;color:navy'> </span></font></p>
<div class=MsoNormal align=center style='text-align:center'><font size=3
face="Times New Roman"><span style='font-size:12.0pt'>
<hr size=2 width="100%" align=center tabindex=-1>
</span></font></div>
<p class=MsoNormal><b><font size=2 face=Tahoma><span style='font-size:10.0pt;
font-family:Tahoma;font-weight:bold'>From:</span></font></b><font size=2
face=Tahoma><span style='font-size:10.0pt;font-family:Tahoma'>
ale-bounces@ale.org [mailto:ale-bounces@ale.org] <b><span style='font-weight:
bold'>On Behalf Of </span></b>Jim Kinney<br>
<b><span style='font-weight:bold'>Sent:</span></b> Thursday, July 03, 2008
12:59 AM<br>
<b><span style='font-weight:bold'>To:</span></b> dhhoward@comcast.net;
ale@ale.org<br>
<b><span style='font-weight:bold'>Subject:</span></b> Re: [ale] XP Malware - XP
Security Center</span></font></p>
</div>
<p class=MsoNormal><font size=3 face="Times New Roman"><span style='font-size:
12.0pt'> </span></font></p>
<p class=MsoNormal style='margin-bottom:12.0pt'><font size=3
face="Times New Roman"><span style='font-size:12.0pt'> </span></font></p>
<div>
<p class=MsoNormal><font size=3 face="Times New Roman"><span style='font-size:
12.0pt'>On Thu, Jul 3, 2008 at 12:35 AM, Daniel Howard <<a
href="mailto:dhhoward@comcast.net">dhhoward@comcast.net</a>> wrote:</span></font></p>
<p class=MsoNormal><font size=3 face="Times New Roman"><span style='font-size:
12.0pt'>Short question: do you have a win XP malware removal tool you
recommend?</span></font></p>
<div>
<p class=MsoNormal><font size=3 face="Times New Roman"><span style='font-size:
12.0pt'><br>
dd if=/dev/zero of=/dev/hda using toms root boot disk <a
href="http://www.toms.net/rb/">http://www.toms.net/rb/</a><br>
<br>
I have used this malware removel with 100% success for the past 10 years.
Removes ALL virii included boot sector nasties that call ntloader and
others.Run! Don't walk to <a href="http://www.toms.net/rb/">http://www.toms.net/rb/</a>
and download your copy today! <br>
<br>
dban is another tool that will also thoughly cleanse the drive of virii and
spyware: <a href="http://dban.sourceforge.net/">http://dban.sourceforge.net/</a><br>
<br>
I was able to manually pound someof those off by killing of many running bugs
and deleting them manulally. But I did finally use the BartsPE disk I carry.
Live windows CD. </span></font></p>
</div>
<blockquote style='border:none;border-left:solid #CCCCCC 1.0pt;padding:0in 0in 0in 6.0pt;
margin-left:4.8pt;margin-right:0in'>
<p class=MsoNormal><font size=3 face="Times New Roman"><span style='font-size:
12.0pt'><br>
<br>
Long version:<br>
<br>
I've googled myself to death on this one. I've tried everything so far<br>
except purchasing a new Windows antimalware program (currently use<br>
ClamAV and Spybot SD). I've somehow picked up a malware program that<br>
puts a red circle with a white X in it in the task tray that keeps<br>
trying to get me to buy some rogue antispyware program called XP<br>
Security Center. I researched it, sure enough it's malware (rogue<br>
antispyware), found the names of the files used (winivstr.exe and<br>
braviax.exe) and couldn't delete them due to being in use, so I booted<br>
my XP install disk in recovery mode, and deleted the files from all<br>
locations found from searching (in the WINDOWS and SYSTEM32<br>
directories), and dang if they still don't get replaced on reboot.<br>
<br>
So, I probably need to purchase a better tool for removal, but there's<br>
so much crap out there that poses as malware removal that is likely yet<br>
another malware package. Is there a good malware removal package that<br>
would work on beasties like this one?<br>
<br>
Thanks, Daniel<br>
_______________________________________________<br>
Ale mailing list<br>
<a href="mailto:Ale@ale.org">Ale@ale.org</a><br>
<a href="http://mail.ale.org/mailman/listinfo/ale" target="_blank">http://mail.ale.org/mailman/listinfo/ale</a></span></font></p>
</blockquote>
</div>
<p class=MsoNormal><font size=3 face="Times New Roman"><span style='font-size:
12.0pt'><br>
<br clear=all>
<br>
-- <br>
-- <br>
James P. Kinney III </span></font></p>
</div>
</DIV>
<DIV STYLE="FONT-SIZE: 9pt; FONT-FAMILY: Courier New">
<FONT FACE="Arial" SIZE="2">----------------------------------<BR>CONFIDENTIALITY NOTICE: This e-mail may contain privileged or confidential information and is for the sole use of the intended recipient(s). If you are not the intended recipient, any disclosure, copying, distribution, or use of the contents of this information is prohibited and may be unlawful. If you have received this electronic transmission in error, please reply immediately to the sender that you have received the message in error, and delete it. Thank you.<BR>----------------------------------<BR></FONT>
</DIV></BODY></HTML>