Author Topic: Cult worm ... undetected by Avast?  (Read 5284 times)

0 Members and 1 Guest are viewing this topic.

Emaan

  • Guest
Cult worm ... undetected by Avast?
« on: February 13, 2004, 07:15:35 PM »
Can someone tip me on this?

This is how symantec discribed my problem
c:\WINDOWS\SYSTEM\iexplorer.exe is geïnfecteerd met W32.HLLW.Cult.C@mm

And this is what escan wrote about it
16:24:07 Object: "iexplorer.exe" in path "C:\WINDOWS\SYSTEM". Status: "Virus (could not be removed)".  Virus "I-Worm.Cult.d"

But neither of them gave any help...
any advise would be most welcome!

Waldo

  • Guest
Re:Cult worm ... undetected by Avast?
« Reply #1 on: February 13, 2004, 07:24:43 PM »
You used symantecs online scanner i suppose ?

You can always send the file to Avast for examination. And they will update there database asap.

Or you can try to do a online scanner check with RAV :

http://www.ravantivirus.com/scan/indexie.php

But first try to kill the worm process in taskmanager : iexplorer.exe. pay attention not to kill iexplore.exe. (wich is your browser)

Symantec info about the virus :

http://securityresponse.symantec.com/avcenter/venc/data/w32.hllw.cult.c@mm.html

Waldo


Emaan

  • Guest
Re:Cult worm ... undetected by Avast?
« Reply #2 on: February 13, 2004, 07:59:59 PM »
Thanks for answering, Mr. Waldo!
i cannot find any iexplorer.exe anywhere.
Hopefully the name is not changed, if that is possible at all.

after several attempts still no file about cult.c found at symantec
maybe later...
Thank you for the reply!

Offline raman

  • Avast Evangelist
  • Advanced Poster
  • ***
  • Posts: 1062
Re:Cult worm ... undetected by Avast?
« Reply #3 on: February 14, 2004, 09:42:21 AM »
BTW: Avast should be able to delete the Virus in Windows safe mode.
MfG Ralf

whocares

  • Guest
Re:Cult worm ... undetected by Avast?
« Reply #4 on: February 14, 2004, 06:29:24 PM »

after several attempts still no file about cult.c found at symantec
maybe later...
Thank you for the reply!

Hi,

 ClickME
 
Info on Cult.C:
Just search for Cult.C here:
http://www.symantec.com/avcenter/vinfodb.html


to find/delete the file on your PC:
you'll probably have to set your (File-)Explorer to show all files&folders including system&hidden files: settings to be found somewhere in extras or view ->options

 ;)
« Last Edit: February 14, 2004, 06:54:48 PM by whocares »

Emaan

  • Guest
Re:Cult worm ... undetected by Avast?
« Reply #5 on: February 27, 2004, 01:26:32 PM »
i found the following:

Navigate to each of the following keys:

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\
RunServices
In the right pane, delete the value:

sysconfig iexplorer.exe


hope it works...