w32.Funlove.4099

Disinfection of Funlove:

Disinfection of Funlove requires removing the virus from all disinfectable files with F-Secure Anti-Virus and renaming or deleting of all locked or non-disinfectable files including Funlove dropper FLCSS.EXE file. To be able to disinfect or delete locked files, you have to exit to pure DOS and clean a system with a DOS version of F-Prot or AVP. Or in case of Windows NT, you have to rename the file(s) with a non-executable extension (for example *.EX1) and restart a system.

In all cases FLCSS.EXE file and all non-disinfectable files should be deleted or renamed before Windows is started next time or a system will be re-infected.

If infection is in a network, you could protect clean systems with F-Secure\'s Anti-Funlove utility:

ftp://ftp.europe.f-secure.com/anti-virus/tools/antifun.zip

and then disinfect all infected workstations separately. Note that GateKeeper/OAS setting should be set to \'Disinfect Automatically\' when infection is in a network and it\'s not possible to take it down. But it is advised to take network down during disinfection as Funlove will try to spread from infected to clean systems via network. Our utility should stop it from doing that, but it\'s safer to disinfect when network is not functioning.

Note that a system should be clean before the utility can be installed.

Also as the virus patches the \\NTLDR and WINNT\\System32\\ntoskrnl.exe files to disable NT\'s security the patched files should be restored from a backup.

Du kan downloade et virus program herfra: http://www.antivirus.com/pc-cillin/

ref: http://www.europe.f-secure.com/v-descs/funlove.shtml

http://www.symantec.com/avcenter/tools.list.html

http://www.symantec.com/avcenter/venc/data/dos.funlove.4099.fix.tool.html

Prøv desuden med denne onlinescanner først: http://housecall.antivirus.com/

sådan noget gøje møj....
Pc cillin virker ikke.. men fik ved en fejl accepteret dit svar mckim...
så hvis du lige vil vise dig fra din pæne side og sende dem videre til riversen.. da det var hans link der hjalp mig.
På forhånd.. tak..

ps... det ser dog stadig sort ud for en del af programmerne.. da de er røget i karantæne på norton.. og norton kan ikke startes men det bliver en ny opgave at løse

////Bouggi