My anti virus throws up a warning on booting up. The virus is sitting
in my windos/command.programmes/start folder and is attached to
msupdate.exe. I can open up to the desk top by ignoring it but a
windows box  appears saying that it cannot find start.exe. (which it
needs to launch applications)I manually find it each time but when
I try to launch any programme the virus warning reappears. And so we
go round again!

THere seems to be very little on the web re this virus. I use AVG
(currently 6 soon to be 7) with files updated on 31 Dec. Running
windows 98SE (but have seperate access to an XP machine).

How can I get rid of this virus? Can I replace the file from the
Windows install disk? Problem is that if I try and drag the infected file to
the recycle bin the computer goes down and we are back to the AVG
virus warning dialogue box.

This is urgent as I have some important accounts details on that
machine and I am flyiong to the US from the UK on Wed am.

Thanks in advance!

Chris Richardson

---

Clarification of Question by eaurouge-ga on 03 Jan 2005 09:44 PST

My apologies I gave you the wrong string. The MSupdate virus is at
Windows/start menu/programmes/startup

The start.exe is in Windows/command

---

Request for Question Clarification by hummer-ga on 03 Jan 2005 10:53 PST

Hi Chris,

I would first run HouseCall, a very thorough online virus scan which
often catches things that others miss.

HouseCall:
http://housecall.trendmicro.com/

If still no joy, follow the directions at Symantec.

W32.Protoride.Worm: removal instructions:
http://securityresponse.symantec.com/avcenter/venc/data/w32.protoride.worm.html

While you're at it, it wouldn't hurt to scan with Ad-aware.

Ad-aware ("check for updates" before running):
http://lavasoft.element5.com/default.shtml.en

Please let me know if that solves it or if you need further assistance.
Thank you,
hummer

---

Clarification of Question by eaurouge-ga on 03 Jan 2005 16:01 PST

THanks for the swift reply: as I said in my original question I
couldn't open ANYTHING! (computer kept throwing up virus detected
dialog box) so House call was out of the question as it meant firuing
up a browser.
However the 'W32.Protoride.Worm: removal instructions:' accessed from
my other computer printed out and applied to the Windows 98 SE in safe
mode worked like a dream!

I can now do House call (I already use ad-aware & spybot). Hopefully
it will not return.

Thanks for your help! Iwish you a very happy NEw Year!

Chris

Hi Chris,

Thank you for the good news and for giving me the opportunity to
answer your question. To make it official, here it is again -

I would first run HouseCall, a very thorough online virus scan which
often catches things that others miss.

HouseCall:
http://housecall.trendmicro.com/

If still no joy, follow the directions at Symantec.

W32.Protoride.Worm: removal instructions:
http://securityresponse.symantec.com/avcenter/venc/data/w32.protoride.worm.html

While you're at it, it wouldn't hurt to scan with Ad-aware.

Ad-aware ("check for updates" before running):
http://lavasoft.element5.com/default.shtml.en


Please accept my apologies for not thinking about the fact that you
couldn't use your browser, my brain was asleep on that one, I guess
because you went on to talk about "THere seems to be very little on
the web re this virus".  However, you seem to be on-the-ball and have
the situation well-in-hand. Good job!

I'm really glad the manual instructions worked for you. If you have
any questions, please let me know.

Thanks again and Happy New Year too,
hummer

Google Search Term Used: protoride