locked
Virus:HTML/Allaple.A Quarantine failed. HELP!!! RRS feed

  • Question

  • I am running the lateset onecare software and continue to have this virus.

    OneCare find it and names it corectly but is unable to remove it or stop it from replicating.

    Please I need to stop this

     

    Saturday, August 18, 2007 6:48 PM

Answers

All replies

  • This is a new ( uncommon ) infection on such matter please contact support with regards to this infection and so to proceed with manual removal click the link below.

     http://help.live.com/help.aspx?project=onecarev2

     

     

    Saturday, August 18, 2007 7:03 PM
  • According to Windows "Live" OneCare this is the only way to contact support!!!

    BullGuard antivirus shows it can remove it. WHy can Microsoft. the virus has been out since dec 2006.

    Threat Analysis
    • File is polymorphically encrypted.

    • Copies itself to weakly protected network shared folders.

    • Performs Denial of Service attacks on several websites.

    I found this thread

    http://www.bleepingcomputer.com/forums/topic74565.html

    but I need a fix or a way to delete it.

    Saturday, August 18, 2007 7:05 PM
  • yes it was to be exact found last december of 2006, and well enough it was update recently that the infection has only or a part of the old infection. Thats why i did said its quite "new" - in a way a strand or variant of such, since it was detected as well by onecare yet it cant be instantly removed by it, please  see my post above there is a link to get assistance directly from Windows Onecare for the manual removal of this infection.

    Saturday, August 18, 2007 7:18 PM
  • I found a live strand of HTML/Allaple.A and simulated an infection - just for confirmation Windows Onecare is very able to remove such infection. So I do believe the copy of such html is located deep within your system most probably your system restore point

    Go to Control Panel> System > System > One System Properties Windows>System Restore Tab and check the option to turn off system restore then apply and ok

     

    Afterwards:

    Uncheck to create a system restore point once more

     

     

    Also go here

    start>run type temp ( delete all that can be removed )

    start>run type %temp% ( delete all that can be removed )

    start>run type prefetch ( delete all that can be removed )

    Sunday, August 19, 2007 3:45 PM
  • By "latest" version of OneCare, do you mean the 2.0 beta or the released version from http://onecare.live.com?

    See this post for Quarantine Failed - http://forums.microsoft.com/WindowsOneCare/ShowPost.aspx?PostID=1548384&SiteID=2

    The support link provided by Milo is for the 2.0 beta. If you are a subscriber and have version 1.6, see this post for how to contact support - http://forums.microsoft.com/WindowsOneCare/ShowPost.aspx?PostID=1548384&SiteID=2

     

    -steve

     

    Monday, August 20, 2007 1:07 AM
    Moderator
  • In my case, MS Live OneCare repeatedly finds the infection allaple.A. I click "Clean All."  MS Live OneCare reports that the infection has been cleaned.  Half an hour or less later it reports finding it again. 

     

    I downloaded and ran Kaspersky Lab's removal tool.  It did not find the infection.

     

     

     

    Thursday, August 7, 2008 4:27 PM
  •  kjll wrote:

    In my case, MS Live OneCare repeatedly finds the infection allaple.A. I click "Clean All."  MS Live OneCare reports that the infection has been cleaned.  Half an hour or less later it reports finding it again. 

     

    I downloaded and ran Kaspersky Lab's removal tool.  It did not find the infection.

    Just because Kaspersky didn't find it, doesn't mean that the infection isn't still present.

    Since OneCare cannot remove the malware permanently in your case, please contact support to report this and for help with removal.

    How to reach support (FAQ) - http://forums.microsoft.com/WindowsOneCare/ShowPost.aspx?PostID=2421771&SiteID=2

     

    If you are in North America, you can call 866-727-2338 for help with virus and spyware infections. See http://www.microsoft.com/protect/support/default.mspx  for details.  For international information, see your local subsidiary Support site.

    -steve
    Thursday, August 7, 2008 4:48 PM
    Moderator
  •  MILO wrote:

    I found a live strand of HTML/Allaple.A and simulated an infection - just for confirmation Windows Onecare is very able to remove such infection. So I do believe the copy of such html is located deep within your system most probably your system restore point

    Go to Control Panel> System > System > One System Properties Windows>System Restore Tab and check the option to turn off system restore then apply and ok

     

    Afterwards:

    Uncheck to create a system restore point once more

     

     

    Also go here

    start>run type temp ( delete all that can be removed )

    start>run type %temp% ( delete all that can be removed )

    start>run type prefetch ( delete all that can be removed )

     

    I found once I did this it cleared out the virus.

    Also you will have to Kull your Email inbox and sent items.

    I found that it hung around in there

    Friday, August 8, 2008 7:50 PM