Virus:HTML/Allaple.A Quarantine failed. HELP!!!

Alle besvarelser

• 18. august 2007 19:03

   

   
  

  0

  This is a new ( uncommon ) infection on such matter please contact support with regards to this infection and so to proceed with manual removal click the link below.

   http://help.live.com/help.aspx?project=onecarev2

   

   

   
• 18. august 2007 19:05

   

   
  

  0

  According to Windows "Live" OneCare this is the only way to contact support!!!

  BullGuard antivirus shows it can remove it. WHy can Microsoft. the virus has been out since dec 2006.

  Threat Analysis

  File is polymorphically encrypted. Copies itself to weakly protected network shared folders. Performs Denial of Service attacks on several websites.

  I found this thread

  http://www.bleepingcomputer.com/forums/topic74565.html

  but I need a fix or a way to delete it.

   
• 18. august 2007 19:18

   

   
  

  0

  yes it was to be exact found last december of 2006, and well enough it was update recently that the infection has only or a part of the old infection. Thats why i did said its quite "new" - in a way a strand or variant of such, since it was detected as well by onecare yet it cant be instantly removed by it, please  see my post above there is a link to get assistance directly from Windows Onecare for the manual removal of this infection.

   
• 19. august 2007 15:45

   

   
  

  0

  I found a live strand of HTML/Allaple.A and simulated an infection - just for confirmation Windows Onecare is very able to remove such infection. So I do believe the copy of such html is located deep within your system most probably your system restore point

  Go to Control Panel> System > System > One System Properties Windows>System Restore Tab and check the option to turn off system restore then apply and ok

   

  Afterwards:

  Uncheck to create a system restore point once more

   

   

  Also go here

  start>run type temp ( delete all that can be removed )

  start>run type %temp% ( delete all that can be removed )

  start>run type prefetch ( delete all that can be removed )

   
• 20. august 2007 01:07

  Redaktør

   

   
  

  0

  By "latest" version of OneCare, do you mean the 2.0 beta or the released version from http://onecare.live.com?

  See this post for Quarantine Failed - http://forums.microsoft.com/WindowsOneCare/ShowPost.aspx?PostID=1548384&SiteID=2

  The support link provided by Milo is for the 2.0 beta. If you are a subscriber and have version 1.6, see this post for how to contact support - http://forums.microsoft.com/WindowsOneCare/ShowPost.aspx?PostID=1548384&SiteID=2

   

  -steve

   

   
• 7. august 2008 16:27

   

   
  

  0

  In my case, MS Live OneCare repeatedly finds the infection allaple.A. I click "Clean All."  MS Live OneCare reports that the infection has been cleaned.  Half an hour or less later it reports finding it again. 

   

  I downloaded and ran Kaspersky Lab's removal tool.  It did not find the infection.

   

   

   

   
• 7. august 2008 16:48

  Redaktør

   

   
  

  0

  kjll wrote:

  In my case, MS Live OneCare repeatedly finds the infection allaple.A. I click "Clean All."  MS Live OneCare reports that the infection has been cleaned.  Half an hour or less later it reports finding it again.    I downloaded and ran Kaspersky Lab's removal tool.  It did not find the infection.

  Just because Kaspersky didn't find it, doesn't mean that the infection isn't still present.

  Since OneCare cannot remove the malware permanently in your case, please contact support to report this and for help with removal.

  How to reach support (FAQ) - http://forums.microsoft.com/WindowsOneCare/ShowPost.aspx?PostID=2421771&SiteID=2

   

  If you are in North America, you can call 866-727-2338 for help with virus and spyware infections. See http://www.microsoft.com/protect/support/default.mspx  for details.  For international information, see your local subsidiary Support site.

  -steve
   
• 8. august 2008 19:50

   

   
  

  0

  MILO wrote:

  I found a live strand of HTML/Allaple.A and simulated an infection - just for confirmation Windows Onecare is very able to remove such infection. So I do believe the copy of such html is located deep within your system most probably your system restore point Go to Control Panel> System > System > One System Properties Windows>System Restore Tab and check the option to turn off system restore then apply and ok   Afterwards: Uncheck to create a system restore point once more     Also go here start>run type temp ( delete all that can be removed ) start>run type %temp% ( delete all that can be removed ) start>run type prefetch ( delete all that can be removed )

   

  I found once I did this it cleared out the virus.

  Also you will have to Kull your Email inbox and sent items.

  I found that it hung around in there