English Deutsch Français Italiano Español Português 繁體中文 Bahasa Indonesia Tiếng Việt ภาษาไทย
All categories

HELP ME I ALREADY HAVE A ANTIVIRUS AND IM PAYING FOR IT SO DONT TELL ME TO TAKE IF OFF BUT THIS VIRUS IS SUPER DANGEROUS I NEED HELP WHAT DO I DO , GIVE ME THE INSTRUCTIONS ON HOW TO TAKE IF OFF!

2006-12-14 11:06:38 · 7 answers · asked by Nathalie 2 in Computers & Internet Security

7 answers

This is not the name of any particular virus. In fact, it might not be a virus at all.

Anything that Norton Anti-Virus reports with "Bloodhound" in the name is not a particular malware name but a heuristic. Basically, it means "this thing sure looks suspicious, but I haven't seen it before and have no idea whether it is a virus or not".

The part of the report after the "Bloodhound" name shows which particular heuristic has produced it. In your particular case, it's the heuristic that detects executable files that are packed with packers usually used by malware authors to pack their programs.

Since we don't know what the thing is (or even if it is a virus at all), we can't know that it is "super dangerous". The best thing to do is to send a sample of it to Symantec (the producer of your anti-virus program) and wait until they implement specific detection and removal for it (if it is indeed malware).

2006-12-14 19:11:33 · answer #1 · answered by Vesselin Bontchev 6 · 0 0

Ok.You need not remove the antivirus. I suggest that you try to carryout system restore to a day previous to the day when there was no virus or any problems. It may be a few weeks or months back. You have to decide the date. Detailed instructions are posted at http://fixit.in/systemrestore.html
The problem is likely to be solved. Then,You insatll a standard antivirus soft ware( Or reinstall your antivirus and update it if required) such as Norton, AVG , Avast ( free antivirus software and Ad-aware, Ewido ( free spyware removers). You can download free softwares at
http://fixit.in/antivirus.html and http://fixit.in/spywareremover.html

2006-12-17 00:28:47 · answer #2 · answered by Anonymous · 0 0

Manually run the update for your antivirus to see if the data based is already up to date with this virus removal info. If it can't remove it, you'll need a BETTER antivirus scanner. Download a free or trials version from another company. Temporary uninstall your current antivirus scanner (it's only temporary because you can always install back again after the virus is remove). Install the scanner you just download and run it to see if it can remove this virus. If it can't, remove the scanner you have and install another scanner and go through the same process again until you get it. Here's all the free anti-virus scanners i recommend:
AVG free edition http://free.grisoft.com/freeweb.php/doc/2/
Avast http://www.avast.com/eng/download-avast-home.html
Avira http://www.free-av.com <<<<<<<>>

2006-12-14 11:21:24 · answer #3 · answered by Ted B 6 · 0 1

go to www.majorgeek.com
scroll down the page about half way and on the left is a Search Bar
enter the name of the virus and a page comes up and allows you to click on different programs to view what they may be able to do for you. But don't forget that microsoft.com has wonderful information if you take the time to search and do your homework on the problems

2006-12-14 11:14:16 · answer #4 · answered by mistyblueheart 1 · 0 1

In most cases the antivirus program detects the virus in Temporary Internet files that have been downloaded from a web page. Such as:

C:\Documents and Settings\UserName\Local Settings\Temporary Internet Files\Content.IE5\KXURSTI7\10523[1].htm

In these cases, the Bloodhound.Exploit.6 ends up being a false positive detection of a virus. It looks like a virus to the scanner, but in reality it isnt. Now although the exploit is a real threat and can cause damage to a system, these false positive diagnoses from the antivirus software usually are the cause. I have had web pages and even corrupted Hijackthis logs cause this false positive from the antivirus program.

If Norton Antivirus' AutoProtect Settings are set to High for Bloodhound, the program will produce false positives for many files. The default level is recommended for most protection.

What the Bloodhound.Exploit.6?

The Bloodhound.Exploit.6 virus is a Microsoft Internet Explorer/Outlook Express vulnerability discovered in February 2004. The vulnerability results from the incorrect handling of HTML files embedded in CHM files. (CHM is the Microsoft-compiled HTML help format.) However, because of Norton Antivirus' (and other antivirus programs) ability to detect virus patterns, this heuristic detection of viruses can sometimes lead to false positives.

In most cases the antivirus program detects the virus in Temporary Internet files that have been downloaded from a web page. Such as:

C:\Documents and Settings\UserName\Local Settings\Temporary Internet Files\Content.IE5\KXURSTI7\10523[1].htm

In these cases, the Bloodhound.Exploit.6 ends up being a false positive detection of a virus. It looks like a virus to the scanner, but in reality it isnt. Now although the exploit is a real threat and can cause damage to a system, these false positive diagnoses from the antivirus software usually are the cause. I have had web pages and even corrupted Hijackthis logs cause this false positive from the antivirus program.

If Norton Antivirus' AutoProtect Settings are set to High for Bloodhound, the program will produce false positives for many files. The default level is recommended for most protection.



How to Clean/Delete the Bloodhound.Exploit.6 virus?

First of all, since this exploit is a real threat be sure your Windows software is up-to-date and patched with all the current critical updates from Microsoft. This will protect your system from other problems as well as this exploit.

1) Open Internet Explorer and type the following in the Address bar

http://windowsupdate.microsoft.com

2) Follow the on screen prompts to download and install any critical updates that are not loaded on your computer.

You can read more about the specific patch for this Microsoft vulnerability by clicking on the link below

http://www.microsoft.com/technet/security/bulletin/ms04-013.mspx

Now that your system is patched against this exploit, you'll want to remove the file that triggered the virus notice. In the majority of cases, these files are stored in the Temporary Internet Files or Temp folder of the computer. Follow these directions to clean out these files.

For Internet Explorer 5 and above, you can follow these directions to clear out temporary files and delete cookies.

1) Open Internet Explorer and click on Tools
2) Click on Internet Options
3) On the General Tab, in the middle of the screen, click on Delete Files
4) You may also want to check the box "Delete all offline content"
5) Click on OK and wait for the hourglass icon to stop after it deletes the temporary internet files
6) You can now click on Delete Cookies and click OK to delete cookies that websites have placed on your hard drive.

To clean up other temporary files on your computer in Windows 98 or higher:

1) Click Start, Programs (or All Programs), Accessories, System Tools, Disk Cleanup
2) Choose the correct drive usually C:\
3) Check the boxes in the list and delete the files

You can learn more information about deleting these Temporary Internet Files, cookies, and more by visiting this page

Lastly, run a thorough virus scan of your system or visit Trend Micro Housecall to make sure your system is clean.

2006-12-14 11:29:05 · answer #5 · answered by Neo 5 · 1 1

If you paid for the antivirus program then why do you have viruses???? And why do you pay for something you can have for free??? In case you change your mind:
http://askcomputerexpert.ws43.com/download/security.htm

2006-12-15 03:20:29 · answer #6 · answered by crys.roxy 3 · 0 1

http://www.symantec.com/security_response/writeup.jsp?docid=2006-120715-4856-99&tabid=1

seems the def. out yesterday has it in it.
i would do a full scan in safe mode (after checkin for updates)

2006-12-14 11:14:23 · answer #7 · answered by great one 6 · 0 0

fedest.com, questions and answers