Virus Removal

I am using earthlink protection software and it quarantined a virus
identified as w32/Threat-Trojan-Bloop-based!Maximus. It apparently has
infected my MS Money software. When I try to start up money it tries to
install it and says it cannot install, I click and windows saying the same
thing keeps popping up. I keep clicking cancel and eventually it goes away.

How can I delete a quarantined file. How can I remove this virus.
Please help.

Thanks,

Beadle99 wrote:
> I am using earthlink protection software and it quarantined a virus
> identified as w32/Threat-Trojan-Bloop-based!Maximus. It apparently
> has infected my MS Money software. When I try to start up money it
> tries to install it and says it cannot install, I click and windows
> saying the same thing keeps popping up. I keep clicking cancel and
> eventually it goes away.
>
> How can I delete a quarantined file. How can I remove this virus.
> Please help.

Have you, instead, just tried reinstalling MS Money?

--
Shenan Stanley
MS-MVP
--
How To Ask Questions The Smart Way
http://www.catb.org/~esr/faqs/smart-questions.html

From: "Beadle99" <>

| I am using earthlink protection software and it quarantined a virus
| identified as w32/Threat-Trojan-Bloop-based!Maximus. It apparently has
| infected my MS Money software. When I try to start up money it tries to
| install it and says it cannot install, I click and windows saying the same
| thing keeps popping up. I keep clicking cancel and eventually it goes away.
|
| How can I delete a quarantined file. How can I remove this virus.
| Please help.
|
| Thanks,

Wrong News Group !
There are anti virus News Groups specifically for this type of discussion.

microsoft.public.security.virus
alt.comp.virus
alt.comp.anti-virus

Your "earthlink protection software" must be a Frisk based OEM of F-Prot AV software to
provide a heuristic name "w32/Threat-Trojan-Bloop-based!Maximus" as "!Maximus" is a F-Prot
construct.

If a virus is "quarantined" it is put in a safe place and is out of the picture and is no
longer harming your computer. However as noted this was a Heuristic detection not a
signature detection.

Use the following to tool to make sure the PC is clean. As for Monety installing, it would
depend upon exactly what the error is, what the fully qualified name and path to the file
that was deemed to be infected and other factors. The problem with MS Money could be
purely co-incidental.


Download MULTI_AV.EXE from the URL --
http://www.ik-cs.com/programs/virtools/Multi_AV.exe

To use this utility, perform the following...
Execute; Multi_AV.exe { Note: You must use the default folder C:\AV-CLS }
Choose; Unzip
Choose; Close

Execute; C:\AV-CLS\StartMenu.BAT
{ or Double-click on 'Start Menu' in C:\AV-CLS }

NOTE: You may have to disable your software FireWall or allow WGET.EXE to go through your
FireWall to allow it to download the needed AV vendor related files.

C:\AV-CLS\StartMenu.BAT -- { or Double-click on 'Start Menu' in C:\AV-CLS}
This will bring up the initial menu of choices and should be executed in Normal Mode.
This way all the components can be downloaded from each AV vendor's web site.
The choices are; Sophos, Trend, McAfee, Kaspersky, Exit this menu and Reboot the PC.

You can choose to go to each menu item and just download the needed files or you can
download the files and perform a scan in Normal Mode. Once you have downloaded the files
needed for each scanner you want to use, you should reboot the PC into Safe Mode [F8 key
during boot] and re-run the menu again and choose which scanner you want to run in Safe
Mode. It is suggested to run the scanners in both Safe Mode and Normal Mode.

When the menu is displayed hitting 'H' or 'h' will bring up a more comprehensive PDF help
file. http://www.ik-cs.com/multi-av.htm

Additional Instructions:
http://pcdid.com/Multi_AV.htm


* * * Please report back your results * * *



--
Dave
http://www.claymania.com/removal-trojan-adware.html
http://www.ik-cs.com/got-a-virus.htm

I have the identical problem with the same earthlink protection software and
infected MS Money software. I am unable to reinstall MS Money. I am fearful
of installing the software you recommend because I get messages that the
software may be unsafe.
jwohl

"David H. Lipman" wrote:

> From: "Beadle99" <>
>
> | I am using earthlink protection software and it quarantined a virus
> | identified as w32/Threat-Trojan-Bloop-based!Maximus. It apparently has
> | infected my MS Money software. When I try to start up money it tries to
> | install it and says it cannot install, I click and windows saying the same
> | thing keeps popping up. I keep clicking cancel and eventually it goes away.
> |
> | How can I delete a quarantined file. How can I remove this virus.
> | Please help.
> |
> | Thanks,
>
> Wrong News Group !
> There are anti virus News Groups specifically for this type of discussion.
>
> microsoft.public.security.virus
> alt.comp.virus
> alt.comp.anti-virus
>
> Your "earthlink protection software" must be a Frisk based OEM of F-Prot AV software to
> provide a heuristic name "w32/Threat-Trojan-Bloop-based!Maximus" as "!Maximus" is a F-Prot
> construct.
>
> If a virus is "quarantined" it is put in a safe place and is out of the picture and is no
> longer harming your computer. However as noted this was a Heuristic detection not a
> signature detection.
>
> Use the following to tool to make sure the PC is clean. As for Monety installing, it would
> depend upon exactly what the error is, what the fully qualified name and path to the file
> that was deemed to be infected and other factors. The problem with MS Money could be
> purely co-incidental.
>
>
> Download MULTI_AV.EXE from the URL --
> http://www.ik-cs.com/programs/virtools/Multi_AV.exe
>
> To use this utility, perform the following...
> Execute; Multi_AV.exe { Note: You must use the default folder C:\AV-CLS }
> Choose; Unzip
> Choose; Close
>
> Execute; C:\AV-CLS\StartMenu.BAT
> { or Double-click on 'Start Menu' in C:\AV-CLS }
>
> NOTE: You may have to disable your software FireWall or allow WGET.EXE to go through your
> FireWall to allow it to download the needed AV vendor related files.
>
> C:\AV-CLS\StartMenu.BAT -- { or Double-click on 'Start Menu' in C:\AV-CLS}
> This will bring up the initial menu of choices and should be executed in Normal Mode.
> This way all the components can be downloaded from each AV vendor's web site.
> The choices are; Sophos, Trend, McAfee, Kaspersky, Exit this menu and Reboot the PC.
>
> You can choose to go to each menu item and just download the needed files or you can
> download the files and perform a scan in Normal Mode. Once you have downloaded the files
> needed for each scanner you want to use, you should reboot the PC into Safe Mode [F8 key
> during boot] and re-run the menu again and choose which scanner you want to run in Safe
> Mode. It is suggested to run the scanners in both Safe Mode and Normal Mode.
>
> When the menu is displayed hitting 'H' or 'h' will bring up a more comprehensive PDF help
> file. http://www.ik-cs.com/multi-av.htm
>
> Additional Instructions:
> http://pcdid.com/Multi_AV.htm
>
>
> * * * Please report back your results * * *
>
>
>
> --
> Dave
> http://www.claymania.com/removal-trojan-adware.html
> http://www.ik-cs.com/got-a-virus.htm
>
>
>

From: "jwohl" <>

| I have the identical problem with the same earthlink protection software and
| infected MS Money software. I am unable to reinstall MS Money. I am fearful
| of installing the software you recommend because I get messages that the
| software may be unsafe.
| jwohl
|

Not much that can be done here as NO sopecific information has been provided such as what is
teh fully qualified name and path to the supposedly infected file. For all we know ity is a
False Positive but MORE information is needed.

As I indicated....

There are anti virus News Groups specifically for this type of discussion.

microsoft.public.security.virus
alt.comp.virus
alt.comp.anti-virus

--
Dave
http://www.claymania.com/removal-trojan-adware.html
http://www.ik-cs.com/got-a-virus.htm

I used the antiviral program you suggested and was able to remove the virus
and get my MSMoney back in operating condition. Thanx.
Jwohl

"David H. Lipman" wrote:

> From: "Beadle99" <>
>
> | I am using earthlink protection software and it quarantined a virus
> | identified as w32/Threat-Trojan-Bloop-based!Maximus. It apparently has
> | infected my MS Money software. When I try to start up money it tries to
> | install it and says it cannot install, I click and windows saying the same
> | thing keeps popping up. I keep clicking cancel and eventually it goes away.
> |
> | How can I delete a quarantined file. How can I remove this virus.
> | Please help.
> |
> | Thanks,
>
> Wrong News Group !
> There are anti virus News Groups specifically for this type of discussion.
>
> microsoft.public.security.virus
> alt.comp.virus
> alt.comp.anti-virus
>
> Your "earthlink protection software" must be a Frisk based OEM of F-Prot AV software to
> provide a heuristic name "w32/Threat-Trojan-Bloop-based!Maximus" as "!Maximus" is a F-Prot
> construct.
>
> If a virus is "quarantined" it is put in a safe place and is out of the picture and is no
> longer harming your computer. However as noted this was a Heuristic detection not a
> signature detection.
>
> Use the following to tool to make sure the PC is clean. As for Monety installing, it would
> depend upon exactly what the error is, what the fully qualified name and path to the file
> that was deemed to be infected and other factors. The problem with MS Money could be
> purely co-incidental.
>
>
> Download MULTI_AV.EXE from the URL --
> http://www.ik-cs.com/programs/virtools/Multi_AV.exe
>
> To use this utility, perform the following...
> Execute; Multi_AV.exe { Note: You must use the default folder C:\AV-CLS }
> Choose; Unzip
> Choose; Close
>
> Execute; C:\AV-CLS\StartMenu.BAT
> { or Double-click on 'Start Menu' in C:\AV-CLS }
>
> NOTE: You may have to disable your software FireWall or allow WGET.EXE to go through your
> FireWall to allow it to download the needed AV vendor related files.
>
> C:\AV-CLS\StartMenu.BAT -- { or Double-click on 'Start Menu' in C:\AV-CLS}
> This will bring up the initial menu of choices and should be executed in Normal Mode.
> This way all the components can be downloaded from each AV vendor's web site.
> The choices are; Sophos, Trend, McAfee, Kaspersky, Exit this menu and Reboot the PC.
>
> You can choose to go to each menu item and just download the needed files or you can
> download the files and perform a scan in Normal Mode. Once you have downloaded the files
> needed for each scanner you want to use, you should reboot the PC into Safe Mode [F8 key
> during boot] and re-run the menu again and choose which scanner you want to run in Safe
> Mode. It is suggested to run the scanners in both Safe Mode and Normal Mode.
>
> When the menu is displayed hitting 'H' or 'h' will bring up a more comprehensive PDF help
> file. http://www.ik-cs.com/multi-av.htm
>
> Additional Instructions:
> http://pcdid.com/Multi_AV.htm
>
>
> * * * Please report back your results * * *
>
>
>
> --
> Dave
> http://www.claymania.com/removal-trojan-adware.html
> http://www.ik-cs.com/got-a-virus.htm
>
>
>

From: "jwohl" <>

| I used the antiviral program you suggested and was able to remove the virus
| and get my MSMoney back in operating condition. Thanx.
| Jwohl
|

Thanx for updating the thread.

If a module in the Multi AV Scanning Tool found and removed an infector and MS Money works
as expected then it wasn't a False Positive.

--
Dave
http://www.claymania.com/removal-trojan-adware.html
http://www.ik-cs.com/got-a-virus.htm