PDA

View Full Version : please help gotta virus


angelic_694
08-13-2005, 09:16 AM
i gotta virus that nortons cant remove its called MHTLRedir.Exploit if any knows what i can do please help me i dont know much about pc's yet :redno:

Random
08-15-2005, 03:24 AM
Because this is an exploit only, there are no removal instructions, since there is nothing to remove. This is a detection for the exploit, preventing the execution of malicious content on your computer. By detecting the exploit, it is prevented from running. Source (http://securityresponse.symantec.com/avcenter/venc/data/mhtmlredir.exploit.html)

There's no actual virus on your computer, as it said when its detected it is prevented from running. I also have had this virus pop up on me a few times and it says that it can't repair the file because access is denied, but when I did a full virus scan afterwards it found nothing, so seriously don't worry about it. ;)

fdjc4
08-15-2005, 04:50 AM
Random by any chance could you get rid of this file by system resrore?


Assuming angelic_694 doesnt want that file anymore and has system restore enabeled maybe it wioll delte it, tis not a risk but maybe if u go to

http://update.microsoft.com/microsoftupdate/v6/default.aspx?ln=en-us

you might find some security patch?

i dunno the exploit but microsoft update might help you if u wana try it. :)

hope that helps you

the_icon
08-15-2005, 01:21 PM
Have you google'd this - seems some sort of browser infection for ie.

Now is a good time to convert to firefox.

Random
08-15-2005, 01:59 PM
If you had read what I posted proppetly you would understand that, there is nothing on his/her computer to be physically removed, as Norton Prevented it from ever getting there!

On the source where I got that info from is a link to a patch Microsoft relased, to address this issue, if you download that it shouldn't bother any more.

the_icon
08-15-2005, 04:42 PM
"A remote code execution vulnerability exists in the processing of specially crafted MHTML URLs that could allow an attacker’s HTML code to run in the Local Machine security zone in Internet Explorer. This could allow an attacker to take complete control of an affected system."

http://www.microsoft.com/technet/security/bulletin/ms04-013.mspx

Tell your friend that he should keep his OS updated.

I never implied that anything had been installed but an exploit in ie.

Did norton prevent the webpage from downloading/being shown?

angelic_694
08-17-2005, 08:24 AM
random was right i ran nortons again and it didnt pick anything up thanks for all the help guys you rock

angelic_694
08-17-2005, 08:26 AM
Source (http://securityresponse.symantec.com/avcenter/venc/data/mhtmlredir.exploit.html)

There's no actual virus on your computer, as it said when its detected it is prevented from running. I also have had this virus pop up on me a few times and it says that it can't repair the file because access is denied, but when I did a full virus scan afterwards it found nothing, so seriously don't worry about it. ;)

thankyou sooooooooooooooooooooooo much

Random
08-17-2005, 11:35 AM
No problem! ;)