Virus Issue

  • Thread starter Thread starter Tim
  • Start date Start date
T

Tim

I have a virus that continues to reappear at each reboot
even though I have quarantined and deleted. I can no
longer update my anti-virus, so I believe I need to clear
everything off my PC and reload. Any guidance on removal
of XP and reinstall? I have my key data backed up.
 
Unfortunately, it is very likely that the backup will be infected and will
reinfect your machine even after a format and reinstall. It sounds as if
you have either a boot sector virus, or it resides in your system restore
and reactivates itself on the next boot. Try turning off system restore,
then insuring that not files are left there. Remove that virus. If it
returns with system restore disabled, then you have a bootstrap or boot
sector virus, which WILL infect your machine from any backups that you make.

Kinda makes you wish you had invested in an antivirus program, don't it?

Bobby
 
There is a very helpful virus removal newsgroup you may wish to post to:
news://msnews.microsoft.com/microsoft.public.security.virus

Symantec Security Check
http://security.symantec.com/sscv6/default.asp?langid=ie&venid=sym

Virus Removal Tools
http://securityresponse.symantec.com/avcenter/tools.list.html

Online Virus Removal Tutorials
http://www.symantec.com/techsupp/virusremoval/virusremoval_info_tutorial.html

--
Carey Frisch
Microsoft MVP
Windows XP - Shell/User

Be Smart! Protect your PC!
http://www.microsoft.com/security/protect/

---------------------------------------------------------------------------------


|I have a virus that continues to reappear at each reboot
| even though I have quarantined and deleted. I can no
| longer update my anti-virus, so I believe I need to clear
| everything off my PC and reload. Any guidance on removal
| of XP and reinstall? I have my key data backed up.
 
Hi,

Have you tried removing it and running a full system scan in Safe mode? Most
likely the but is active in normal mode, and quarantining it just results in
a renamed copy being created, thus continuing the infection. It is best to
restart in Safe mode, run the scan and delete or quarantine the infectious
file, then remove its startup reference in the system registry. Usually, the
reference is in one of these keys:

HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupreg

--
Best of Luck,

Rick Rogers, aka "Nutcase" - Microsoft MVP

Associate Expert - WindowsXP Expert Zone

Windows help - www.rickrogers.org
 
Back
Top