Group:  English: Live Products and Services ยป microsoft.public.windows.live.onecare.antivirus
Thread: Virus will not clear

DotNetBag
.NET Development Newsgroups

HTVi
TV Discussion Newsgroups

Our Hot Pick: Rising Antivirus 2006 - Certified by TUV & Checkmark! Get 10% discount by entering this coupon code: ONDISCOUNT10
Rising Antivirus 2006

Virus will not clear
"Tony Roberts" <B1TNY[ at ]hotmail.com> 11.07.2007 13:03:35
This is a multi-part message in MIME format.

------=_NextPart_000_0024_01C7C3CC.A9381C80
Content-Type: text/plain;
charset="iso-8859-1"
Content-Transfer-Encoding: quoted-printable

This is my problem:

=20

I am running Windows XP with Windows Live One Care to protect my system, =
which I am very pleased with. Recently, it has reported that I have 4 =
programme files that have been stopped but not quarantined these being:

=20

Bugbear.A[ at ]mm

Mydoom.A[ at ]mm

Badtrans.B[ at ]mm

Sircam[ at ]mm

=20

I have asked One Care for assistance but they say it is beyond their =
expertise! I have searched the Internet for fixes, download a couple =
and scanned my PC but they find nothing despite One Care still reporting =
these files at the end of its nightly scan.

=20

Should I be worried about these files, and does anyone have any advice =
on how to remove them?

=20

Many thanks.

------=_NextPart_000_0024_01C7C3CC.A9381C80
Content-Type: text/html;
charset="iso-8859-1"
Content-Transfer-Encoding: quoted-printable

<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN">
<HTML xmlns:o =3D "urn:schemas-microsoft-com:office:office"><HEAD>
<META http-equiv=3DContent-Type =
content=3Dtext/html;charset=3Diso-8859-1>
<META content=3D"MSHTML 6.00.6000.16481" name=3DGENERATOR></HEAD>
<BODY id=3DMailContainerBody=20
style=3D"PADDING-RIGHT: 10px; PADDING-LEFT: 10px; FONT-SIZE: 10pt; =
COLOR: #000000; PADDING-TOP: 15px; FONT-FAMILY: Verdana"=20
bgColor=3D#ffffff leftMargin=3D0 topMargin=3D0 CanvasTabStop=3D"true" =
acc_role=3D"text"=20
name=3D"Compose message area">
<DIV>
<P class=3DMsoNormal style=3D"MARGIN: 0in 0in 0pt">This is my =
problem:</P>
<P class=3DMsoNormal style=3D"MARGIN: 0in 0in 0pt"><o:p> </o:p></P>
<P class=3DMsoNormal style=3D"MARGIN: 0in 0in 0pt">I am running Windows =
XP with=20
Windows Live One Care to protect my system, which I am very pleased =
with. <SPAN=20
style=3D"mso-spacerun: yes"> </SPAN>Recently, it has reported that =
I have 4=20
programme files that have been stopped but not quarantined these =
being:</P>
<P class=3DMsoNormal style=3D"MARGIN: 0in 0in 0pt"><o:p> </o:p></P>
<P class=3DMsoNormal style=3D"MARGIN: 0in 0in 0pt">Bugbear.A[ at ]mm</P>
<P class=3DMsoNormal style=3D"MARGIN: 0in 0in 0pt">Mydoom.A[ at ]mm</P>
<P class=3DMsoNormal style=3D"MARGIN: 0in 0in 0pt">Badtrans.B[ at ]mm</P>
<P class=3DMsoNormal style=3D"MARGIN: 0in 0in 0pt">Sircam[ at ]mm</P>
<P class=3DMsoNormal style=3D"MARGIN: 0in 0in 0pt"><o:p> </o:p></P>
<P class=3DMsoNormal style=3D"MARGIN: 0in 0in 0pt">I have asked One Care =
for=20
assistance but they say it is beyond their expertise! <SPAN=20
style=3D"mso-spacerun: yes"> </SPAN>I have searched the Internet =
for fixes,=20
download a couple and scanned my PC but they find nothing despite One =
Care still=20
reporting these files at the end of its nightly scan.</P>
<P class=3DMsoNormal style=3D"MARGIN: 0in 0in 0pt"><o:p> </o:p></P>
<P class=3DMsoNormal style=3D"MARGIN: 0in 0in 0pt">Should I be worried =
about these=20
files, and does anyone have any advice on how to remove them?</P>
<P class=3DMsoNormal style=3D"MARGIN: 0in 0in 0pt"><o:p> </o:p></P>
<P class=3DMsoNormal style=3D"MARGIN: 0in 0in 0pt">Many=20
thanks.</P></DIV></BODY></HTML>

------=_NextPart_000_0024_01C7C3CC.A9381C80--

Re: Virus will not clear
"Tagus" <stevejkgum1000[ at ]hotmail.com> 11.07.2007 15:40:07
This is a multi-part message in MIME format.

------=_NextPart_000_0032_01C7C3B0.3B31AC40
Content-Type: text/plain;
charset="iso-8859-1"
Content-Transfer-Encoding: quoted-printable

If it says the files are Blocked, it means they are email viruses on the =
email server computer on the internet. They are not on your computer, =
but OneCare can still see them, and is blocking them from being =
downloaded.=20

When this problem started, what new emails did you get with attachments? =
One of them might be the problem.
--=20
Remove gum before replying. ;-)
"Tony Roberts" <B1TNY[ at ]hotmail.com> wrote in message =
news:DC332060-1BC5-4BB8-A5AB-FE5F3455ABB4[ at ]microsoft.com...
This is my problem:

=20

I am running Windows XP with Windows Live One Care to protect my =
system, which I am very pleased with. Recently, it has reported that I =
have 4 programme files that have been stopped but not quarantined these =
being:

=20

Bugbear.A[ at ]mm

Mydoom.A[ at ]mm

Badtrans.B[ at ]mm

Sircam[ at ]mm

=20

I have asked One Care for assistance but they say it is beyond their =
expertise! I have searched the Internet for fixes, download a couple =
and scanned my PC but they find nothing despite One Care still reporting =
these files at the end of its nightly scan.

=20

Should I be worried about these files, and does anyone have any advice =
on how to remove them?

=20

Many thanks.

------=_NextPart_000_0032_01C7C3B0.3B31AC40
Content-Type: text/html;
charset="iso-8859-1"
Content-Transfer-Encoding: quoted-printable

<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN">
<HTML xmlns:o =3D "urn:schemas-microsoft-com:office:office"><HEAD>
<META http-equiv=3DContent-Type =
content=3Dtext/html;charset=3Diso-8859-1>
<META content=3D"MSHTML 6.00.6000.16481" name=3DGENERATOR>
<STYLE></STYLE>
</HEAD>
<BODY id=3DMailContainerBody=20
style=3D"PADDING-RIGHT: 10px; PADDING-LEFT: 10px; FONT-SIZE: 10pt; =
COLOR: #000000; PADDING-TOP: 15px; FONT-FAMILY: Verdana"=20
bgColor=3D#ffffff leftMargin=3D0 topMargin=3D0 name=3D"Compose message =
area"=20
acc_role=3D"text" CanvasTabStop=3D"true">
<DIV><FONT face=3D"Times New Roman" size=3D3>If it says the files are =
Blocked, it=20
means they are email viruses on the email server computer on the =
internet. They=20
are not on your computer, but OneCare can still see them, and is =
blocking them=20
from being downloaded. </FONT></DIV>
<DIV> </DIV>
<DIV><FONT face=3D"Times New Roman" size=3D3>When this problem started, =
what new=20
emails did you get with attachments? One of them might be the=20
problem.</FONT><BR>-- <BR>Remove gum before replying. ;-)</DIV>
<BLOCKQUOTE dir=3Dltr=20
style=3D"PADDING-RIGHT: 0px; PADDING-LEFT: 5px; MARGIN-LEFT: 5px; =
BORDER-LEFT: #000000 2px solid; MARGIN-RIGHT: 0px">
<DIV>"Tony Roberts" <<A=20
href=3D"mailto:B1TNY[ at ]hotmail.com">B1TNY[ at ]hotmail.com</A>> wrote in =
message <A=20
=
href=3D"news:DC332060-1BC5-4BB8-A5AB-FE5F3455ABB4[ at ]microsoft.com">news:DC3=
32060-1BC5-4BB8-A5AB-FE5F3455ABB4[ at ]microsoft.com</A>...</DIV>
<DIV>
<P class=3DMsoNormal style=3D"MARGIN: 0in 0in 0pt">This is my =
problem:</P>
<P class=3DMsoNormal style=3D"MARGIN: 0in 0in =
0pt"><o:p> </o:p></P>
<P class=3DMsoNormal style=3D"MARGIN: 0in 0in 0pt">I am running =
Windows XP with=20
Windows Live One Care to protect my system, which I am very pleased =
with.=20
<SPAN style=3D"mso-spacerun: yes"> </SPAN>Recently, it has =
reported that I=20
have 4 programme files that have been stopped but not quarantined =
these=20
being:</P>
<P class=3DMsoNormal style=3D"MARGIN: 0in 0in =
0pt"><o:p> </o:p></P>
<P class=3DMsoNormal style=3D"MARGIN: 0in 0in 0pt">Bugbear.A[ at ]mm</P>
<P class=3DMsoNormal style=3D"MARGIN: 0in 0in 0pt">Mydoom.A[ at ]mm</P>
<P class=3DMsoNormal style=3D"MARGIN: 0in 0in 0pt">Badtrans.B[ at ]mm</P>
<P class=3DMsoNormal style=3D"MARGIN: 0in 0in 0pt">Sircam[ at ]mm</P>
<P class=3DMsoNormal style=3D"MARGIN: 0in 0in =
0pt"><o:p> </o:p></P>
<P class=3DMsoNormal style=3D"MARGIN: 0in 0in 0pt">I have asked One =
Care for=20
assistance but they say it is beyond their expertise! <SPAN=20
style=3D"mso-spacerun: yes"> </SPAN>I have searched the Internet =
for fixes,=20
download a couple and scanned my PC but they find nothing despite One =
Care=20
still reporting these files at the end of its nightly scan.</P>
<P class=3DMsoNormal style=3D"MARGIN: 0in 0in =
0pt"><o:p> </o:p></P>
<P class=3DMsoNormal style=3D"MARGIN: 0in 0in 0pt">Should I be worried =
about these=20
files, and does anyone have any advice on how to remove them?</P>
<P class=3DMsoNormal style=3D"MARGIN: 0in 0in =
0pt"><o:p> </o:p></P>
<P class=3DMsoNormal style=3D"MARGIN: 0in 0in 0pt">Many=20
thanks.</P></DIV></BLOCKQUOTE></BODY></HTML>

------=_NextPart_000_0032_01C7C3B0.3B31AC40--

Re: Virus will not clear
"David H. Lipman" <DLipman~nospam~[ at ]Verizon.Net> 11.07.2007 20:22:05
From: "Tony Roberts" <B1TNY[ at ]hotmail.com>

| This is my problem:
|
| I am running Windows XP with Windows Live One Care to protect my system, which I am very
| pleased with. Recently, it has reported that I have 4 programme files that have been
| stopped but not quarantined these being:

What "program files" ?


|
| Bugbear.A[ at ]mm
| Mydoom.A[ at ]mm
| Badtrans.B[ at ]mm
| Sircam[ at ]mm

These are the names of Mass Mailed Internet worms, not programs.

|
| I have asked One Care for assistance but they say it is beyond their expertise! I have
| searched the Internet for fixes, download a couple and scanned my PC but they find nothing
| despite One Care still reporting these files at the end of its nightly scan.
|
| Should I be worried about these files, and does anyone have any advice on how to remove
| them?
|
| Many thanks.

Again, thery are NOT files. They are the nsames of infectors, in this case Mass Mailed
Internet worms.

So the problem is NOT that it is "...beyond their expertise...", it is a problem with you
understanding OneCare's results and how to deal with them.

Please post the EXACVT messages and/or Log File exerpts of the events. Chances are these
were found in email, not disk files. Please be exact provide full details.


--
Dave
http://www.claymania.com/removal-trojan-adware.html
http://www.ik-cs.com/got-a-virus.htm


Re: Virus will not clear
"David H. Lipman" <DLipman~nospam~[ at ]Verizon.Net> 12.07.2007 01:26:04
From: "StephenB" <sboots[ at ]mvps.org>


| If you're getting a message Quarantine Failed and that the threats are blocked,
| see this forum post -
| http://forums.microsoft.com/WindowsOneCare/ShowPost.aspx?PostID=1548384&SiteID=2
|
| And, OneCare Support can absolutely help remove the threats. You may want to
| call them or email them back a demand that the problem be escalated as it is
| their responsibility help you to remove the threat that was blocked by OneCare.
| As noted in the above post, the threats are either an attachment to an email
| file or embedded within a compressed archive, although the former is more
| likely. The problem is that OneCare currently does not tell you any details. You
| can, however, get closer by creating a "support log" and scrolling down to the
| anti-virus section where it will identify the file that contains the infection
| and the path to that file. If it is a message store, such as an Outlook .pst
| file, the specific message will not be identified, so it will be up to you to
| track and delete attachments that are suspect and not needed. Then scan again.
| To create a support log, open OneCare and click on Change Settings. Then go to
| the logging tab and click create support log. The report will open in your
| browser.
| -steve

Does OneCare support MAPI and VIM ?

{ I'll bet it does support MAPI but NOT VIM }

--
Dave
http://www.claymania.com/removal-trojan-adware.html
http://www.ik-cs.com/got-a-virus.htm


Re: Virus will not clear
"David H. Lipman" <DLipman~nospam~[ at ]Verizon.Net> 12.07.2007 20:24:37
From: "StephenB" <sboots[ at ]mvps.org>

| "David H. Lipman" <DLipman~nospam~[ at ]Verizon.Net> wrote:
|
[Quoted Text]
>> Does OneCare support MAPI and VIM ?
>>
>> { I'll bet it does support MAPI but NOT VIM }
| I don't know what VIM is, but MAPI is a message transport, so I assume you are
| wondering about email scanning. OneCare does not scan email messages in transit.
| It will scan the messages on access or during a full scan.
| -steve

Too bad. So it is NOT MAPI nor VIM (Vendor Independent Messaging) compliant.

I can understand not being VIM compliant since that's the Lotus standard. However, not MAPI
complaint ?

Microsoft is a member of the Anti-Phishing Work Group so you would think that when you use a
MAPI compliant email client such as MS Office Outlook, it would scan email on server folders
and most importantly the InBox. As the minimum Phishing email signatures can be used but
more importantly, anti virus signatures.

Other corporate AV packages ARE at least MAPI compliant such as McAfee Enterprise and
Symantec AV (some others are VIM compliant as well).

That's another bad mark on OneCare and another reason why it should *NOT* be used in an
Enterprise environment.

--
Dave
http://www.claymania.com/removal-trojan-adware.html
http://www.ik-cs.com/got-a-virus.htm


Re: Virus will not clear
"David H. Lipman" <DLipman~nospam~[ at ]Verizon.Net> 13.07.2007 02:12:46
From: "StephenB" <sboots[ at ]mvps.org>

| OneCare isn't meant for an Enterprise environment. For that there is the
| Forefront family of products.
| -steve

Thank you.

--
Dave
http://www.claymania.com/removal-trojan-adware.html
http://www.ik-cs.com/got-a-virus.htm


Re: Virus will not clear
"David H. Lipman" <DLipman~nospam~[ at ]Verizon.Net> 13.07.2007 02:19:10
From: "StephenB" <sboots[ at ]mvps.org>


| OneCare isn't meant for an Enterprise environment. For that there is the
| Forefront family of products.
| -steve

http://www.microsoft.com/forefront/clientsecurity/prodinfo/overview.mspx

http://www.microsoft.com/forefront/clientsecurity/prodinfo/faq.mspx

Says alot, but, really says NOTHING about the product except the server side is Antigen
rebranded.

--
Dave
http://www.claymania.com/removal-trojan-adware.html
http://www.ik-cs.com/got-a-virus.htm


Re: Virus will not clear
"Tony Roberts" <B1TNY[ at ]hotmail.com> 13.07.2007 12:10:36
This is a multi-part message in MIME format.

------=_NextPart_000_0039_01C7C557.973F8EA0
Content-Type: text/plain;
charset="iso-8859-1"
Content-Transfer-Encoding: quoted-printable

Many thanks for all your advice and support, its most welcome!
"Tony Roberts" <B1TNY[ at ]hotmail.com> wrote in message =
news:DC332060-1BC5-4BB8-A5AB-FE5F3455ABB4[ at ]microsoft.com...
This is my problem:

=20

I am running Windows XP with Windows Live One Care to protect my =
system, which I am very pleased with. Recently, it has reported that I =
have 4 programme files that have been stopped but not quarantined these =
being:

=20

Bugbear.A[ at ]mm

Mydoom.A[ at ]mm

Badtrans.B[ at ]mm

Sircam[ at ]mm

=20

I have asked One Care for assistance but they say it is beyond their =
expertise! I have searched the Internet for fixes, download a couple =
and scanned my PC but they find nothing despite One Care still reporting =
these files at the end of its nightly scan.

=20

Should I be worried about these files, and does anyone have any advice =
on how to remove them?

=20

Many thanks.

------=_NextPart_000_0039_01C7C557.973F8EA0
Content-Type: text/html;
charset="iso-8859-1"
Content-Transfer-Encoding: quoted-printable

<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN">
<HTML xmlns:o =3D "urn:schemas-microsoft-com:office:office"><HEAD>
<META http-equiv=3DContent-Type =
content=3Dtext/html;charset=3Diso-8859-1>
<META content=3D"MSHTML 6.00.6000.16481" name=3DGENERATOR></HEAD>
<BODY id=3DMailContainerBody=20
style=3D"PADDING-RIGHT: 10px; PADDING-LEFT: 10px; FONT-SIZE: 10pt; =
COLOR: #000000; PADDING-TOP: 15px; FONT-FAMILY: Verdana"=20
bgColor=3D#ffffff leftMargin=3D0 topMargin=3D0 CanvasTabStop=3D"true" =
acc_role=3D"text"=20
name=3D"Compose message area">
<DIV>Many thanks for all your advice and support, its most =
welcome!</DIV>
<BLOCKQUOTE dir=3Dltr=20
style=3D"PADDING-RIGHT: 0px; PADDING-LEFT: 5px; MARGIN-LEFT: 5px; =
BORDER-LEFT: #000000 2px solid; MARGIN-RIGHT: 0px">
<DIV>"Tony Roberts" <<A title=3Dmailto:B1TNY[ at ]hotmail.com=20
href=3D"mailto:B1TNY[ at ]hotmail.com">B1TNY[ at ]hotmail.com</A>> wrote in =
message <A=20
title=3Dnews:DC332060-1BC5-4BB8-A5AB-FE5F3455ABB4[ at ]microsoft.com=20
=
href=3D"news:DC332060-1BC5-4BB8-A5AB-FE5F3455ABB4[ at ]microsoft.com">news:DC3=
32060-1BC5-4BB8-A5AB-FE5F3455ABB4[ at ]microsoft.com</A>...</DIV>
<DIV>
<P class=3DMsoNormal style=3D"MARGIN: 0in 0in 0pt">This is my =
problem:</P>
<P class=3DMsoNormal style=3D"MARGIN: 0in 0in =
0pt"><o:p> </o:p></P>
<P class=3DMsoNormal style=3D"MARGIN: 0in 0in 0pt">I am running =
Windows XP with=20
Windows Live One Care to protect my system, which I am very pleased =
with.=20
<SPAN style=3D"mso-spacerun: yes"> </SPAN>Recently, it has =
reported that I=20
have 4 programme files that have been stopped but not quarantined =
these=20
being:</P>
<P class=3DMsoNormal style=3D"MARGIN: 0in 0in =
0pt"><o:p> </o:p></P>
<P class=3DMsoNormal style=3D"MARGIN: 0in 0in 0pt">Bugbear.A[ at ]mm</P>
<P class=3DMsoNormal style=3D"MARGIN: 0in 0in 0pt">Mydoom.A[ at ]mm</P>
<P class=3DMsoNormal style=3D"MARGIN: 0in 0in 0pt">Badtrans.B[ at ]mm</P>
<P class=3DMsoNormal style=3D"MARGIN: 0in 0in 0pt">Sircam[ at ]mm</P>
<P class=3DMsoNormal style=3D"MARGIN: 0in 0in =
0pt"><o:p> </o:p></P>
<P class=3DMsoNormal style=3D"MARGIN: 0in 0in 0pt">I have asked One =
Care for=20
assistance but they say it is beyond their expertise! <SPAN=20
style=3D"mso-spacerun: yes"> </SPAN>I have searched the Internet =
for fixes,=20
download a couple and scanned my PC but they find nothing despite One =
Care=20
still reporting these files at the end of its nightly scan.</P>
<P class=3DMsoNormal style=3D"MARGIN: 0in 0in =
0pt"><o:p> </o:p></P>
<P class=3DMsoNormal style=3D"MARGIN: 0in 0in 0pt">Should I be worried =
about these=20
files, and does anyone have any advice on how to remove them?</P>
<P class=3DMsoNormal style=3D"MARGIN: 0in 0in =
0pt"><o:p> </o:p></P>
<P class=3DMsoNormal style=3D"MARGIN: 0in 0in 0pt">Many=20
thanks.</P></DIV></BLOCKQUOTE></BODY></HTML>

------=_NextPart_000_0039_01C7C557.973F8EA0--

Home | Search | Terms | Imprint | Contact
Newsgroups Reader - provided by WiredBox.Net