Updated: February 13, 2007 11:35:58 AM Type: Adware Risk Impact: High File Names: Cpr.dll Adroar.dll ARUPdate.exe cpruninst.exe wast2.exe Systems Affected: Windows 2000, Windows 95, Windows 98, Windows Me, Windows NT, Windows Server 2003, Windows XP

Updated: February 13, 2007 11:35:11 AM Type: Adware Publisher: www.gmbizi.com Risk Impact: High Systems Affected: Windows 2000, Windows 95, Windows 98, Windows Me, Windows NT, Windows XP

Adware.Admass opens Web pages and displays advertisements. Both usually have adult content

These instructions do not apply to all executable file viruses. Check the virus analysis of any individual virus for full details of how it should be treated. If a virus identity file (IDE) is necessary, download and save it to floppy disk.

To disinfect macro viruses: Close down all programs. Go to Start|Programs|Sophos|Sophos Anti-Virus and run the 'Sophos Anti-Virus' program. In the 'Available scans' list, select the scan for which you want to enable removal, or use 'Setup a new scan' to scan your local disks. (Do not select a scheduled scan, as you will not be able to run this manually.) Click Edit|Configure this Scan.

Disinfecting DOS boot record viruses in Windows 95/98/Me and DOS Backup any important data on the hard drive Switch off the PC, wait several seconds and boot from a clean system disk to prevent the virus from being loaded into memory. Create a set of Sophos Anti-Virus Emergency SAV disks.

Disinfecting DOS boot record viruses in Windows 95/98/Me and DOS The boot sector must be replaced using the DOS utility SYS.COM. Contact support if in doubt. Backup any important data on the hard drive Switch off the PC, wait several seconds and boot from a clean system disk to prevent the virus from being loaded into memory. This system disk must be formatted with the same version of the operating system as the PC. At the command prompt type

Disinfecting master boot record viruses in Windows 95/98/Me and DOS Switch off the PC, wait several seconds and boot from a clean system disk to prevent the virus from being loaded into memory. Create a set of Sophos Anti-Virus Emergency SAV disks. Put the first floppy disk, containing a copy of 'SWEEP.EXE' in the floppy disk drive and at the A: prompt type:

The boot sector must be replaced using the DOS utility FDISK.EXE: Switch off the PC, wait several seconds then boot from a clean system disk to prevent the virus from being loaded into memory. At the command prompt type

Resolve is the name for a set of small, downloadable Sophos utilities designed to remove and undo the changes made by certain viruses, Trojans and worms. They terminate any virus processes and reset any registry keys that the virus changed. Existing infections can be cleaned up quickly and easily, both on individual workstations and over networks with large numbers of computers.