Tupsie,

Let's start with this...

---

Download mwav.exe from MicroWorld, then:

1. Double-click the mwav.exe icon to run it ( it'll self extract).
2. Click " Scan".
3. When it completes, post back the results from the 'Virus log information' pane.

Let's see what's running on that system; post up a HiJackThis log for analysis.

---

Download, then unzip to " C:\HJT", the newest version of HiJackThis; version 1.99.0. Now, let's do the following:

1. Click " Scan"
2. Click " Save log"

Notepad will pop-up with a copy of your system long, then:

1. " Edit | Select all"
2. " Edit | Copy"

Next, let's " Reply" back to this post, then:

1. Right-click on the message body.
2. Select " Paste"

Then just " Post" the message, and we'll analyze your log shortly, then post back any recommendation(s).

-

If your having a problem getting the 1.99.0 version to run properly on your system, try downloading and running the previous version; HiJackThis 1.98.2.

---

Mike.

Hi

 

Thanks for your reply.  I have managed to get rid of the isass.exec worm through http://housecall.trendmicro.com which detected it straight away and destroyed it.

 

However I have 33 infected files which cannot be cleaned.

 

It has also brought up  another virus bropia.n which is linked to msm messenger.  I cannot at present find a fix for this.  It is a low risk worm at present which has the potential to become dangerous - any good ideas on this one

Tupsie,

Post back the names of the files that cannot be cleaned and let's see just what they are. Also, i'd recommend posting up a HiJackThis log, if your not familar with it, so we can see if anything is running on your system that shouldn't be.

Mike.

 

Hi

I got rid of the isass.exe using http//housecall.trendmicro.com as recommended.

 

However it seems I now have bropia.m and bropia.n.

 

The weird thing is my antivirus software Norton, did not detect I had the isaas.exe worm nor does it say that I have the bropia problem.

 

Using the housecall as above it killed the isass.exe straight away and has also told me I have 33 infected files with bropia.m and bropia.n - these are uncleanable and I am afraid to delete the files incase they are operational ones.

I do not know if I have any worms or not now, or just infected files, I have been advised to re-format my hardrive and start again as apparently once you get one worm in they let others in.  My computer seems to be working ok, I've not had any weird things happening, maybe a little slower, or that could be just my imagination.

 

The bropia worm apparently has come from the MSM Messenger which my kids use to chat to their friends.  I tried the microsoft malicious software tool which also found nothing, when I obviously had a problem.

 

I'm loathe to wipe my hard drive as it would take forever to re-load everything, although I do not know if the computer is still infected or not!!!!

 

Any ideas???????

Hi

 

The files are as follows 31 of them out of 90738

Bropia.n  non cleanable    C:\system volume informtaion\_...

They all say this.