LovsanA / Blaster......help please

[Anna]

A friend running Windows XP has this virus. We have downloaded
Grisoft AVG 6 and it removes it but every time we switch the machine
off it returns. From reading previous posts to this group it seems that
the way to go is to temporarily remove the restore function. The
advice I see on the web is to edit the registry [which fills me with
fear and trembling!]

Any advice please?

Anna

 

[Michael Cecil]

A friend running Windows XP has this virus. We have downloaded
Grisoft AVG 6 and it removes it but every time we switch the machine
off it returns. From reading previous posts to this group it seems that
the way to go is to temporarily remove the restore function. The
advice I see on the web is to edit the registry [which fills me with
fear and trembling!]

1. Patch your computer so it doesn't get the virus anymore!
http://download.microsoft.com/downl...e-b7a52a983f01/WindowsXP-KB823980-x86-ENU.exe

2. Disinfect your computer.
If AVG can't do it you can use one from Norton:
http://securityresponse.symantec.com/avcenter/FixBlast.exe
or one from McAfee:
http://download.nai.com/products/mcafee-avert/stinger.exe

 

[Michael Cecil]

A friend running Windows XP has this virus. We have downloaded
Grisoft AVG 6 and it removes it but every time we switch the machine
off it returns. From reading previous posts to this group it seems that
the way to go is to temporarily remove the restore function. The
advice I see on the web is to edit the registry [which fills me with
fear and trembling!]

1. Patch your computer so it doesn't get the virus anymore!
http://download.microsoft.com/downl...e-b7a52a983f01/WindowsXP-KB823980-x86-ENU.exe

2. Disinfect your computer.
If AVG can't do it you can use one from Norton:
http://securityresponse.symantec.com/avcenter/FixBlast.exe
or one from McAfee:
http://download.nai.com/products/mcafee-avert/stinger.exe

BTW, if you're just trying to disable the System Restore function
there is no need to go into the registry. Right click on the My
Computer icon and choose Properties, then choose the System Restore
tab and put a check mark in the Disable System Restore box and click
Apply. Remove the check mark to re-enable it.

 

[Anna]

A friend running Windows XP has this virus. We have downloaded
Grisoft AVG 6 and it removes it but every time we switch the machine
off it returns. From reading previous posts to this group it seems that
the way to go is to temporarily remove the restore function. The
advice I see on the web is to edit the registry [which fills me with
fear and trembling!]

1. Patch your computer so it doesn't get the virus anymore!
http://download.microsoft.com/download/9/8/b/98bcfad8-afbc-458f-aaee-b7a52a

983f01/WindowsXP-KB823980-x86-ENU.exe

2. Disinfect your computer.
If AVG can't do it you can use one from Norton:
http://securityresponse.symantec.com/avcenter/FixBlast.exe
or one from McAfee:
http://download.nai.com/products/mcafee-avert/stinger.exe

BTW, if you're just trying to disable the System Restore function
there is no need to go into the registry. Right click on the My
Computer icon and choose Properties, then choose the System Restore
tab and put a check mark in the Disable System Restore box and click
Apply. Remove the check mark to re-enable it.

--
Michael Cecil
(e-mail address removed)
http://home.comcast.net/~macecil/howto/
http://home.comcast.net/~antiviruscd/

Thanks we'll try all that this evening. The virus isn't coming via an
internet connection. Just switching off and rebooting causes it to
regenerate - the computer isn't online. The Sophos tool didn't
clear it completely either.

I haven't got it - I'm still using Win 95 and I don't know my way
around XP very well.

I'll report back.

Thanks again

Anna

 

[Anna]

I'll report back.

Disabling system restore seems to have solved the
problem. It's now re-enabled and the Microsoft
patch installed. AVG is showing no infected files.
I suppose the next step is a better firewall than the
one that comes with XP. I was wondering about
Zonealarm.

Thanks for the help.

Anna