anti-virus cannot clean infected file

[dave]

Have gotten a Trojan virus named Bookstore, NAV cannot
clean,delete,or quarantine file. Any ideas how to get rid
of this file???? at wits end

 

[Dave Patrick]

What file?

--
Regards,

Dave Patrick ....Please no email replies - reply in newsgroup.
Microsoft MVP [Windows NT/2000 Operating Systems]
http://www.microsoft.com/protect.

:
| Have gotten a Trojan virus named Bookstore, NAV cannot
| clean,delete,or quarantine file. Any ideas how to get rid
| of this file???? at wits end

 

[David H. Lipman]

1) If you are using WinME or WinXP, disable System Restore
http://vil.nai.com/vil/SystemHelpDocs/DisableSysRestore.htm
2) Please reboot your PC into Safe Mode
3) Perform a Full Scan of your platform and clean/delete any infectors found
4) Restart your PC and if you are using WinME or WinXP, re-enable System Restore
and then create a new Restore point
5) Perform a "final" Full Scan of your platform then report back your results


Dave




| Have gotten a Trojan virus named Bookstore, NAV cannot
| clean,delete,or quarantine file. Any ideas how to get rid
| of this file???? at wits end

 

[dcdon]

Depends on the OS
Go to Google and "type" Bookstore Virus

 

[David H. Lipman]

Dave:

Either you clock is wrong or your ISP is delaying your post. It did not show up until ~6pm
but your post time is ~3:30pm.

Dave L.



| What file?
|
| --
| Regards,
|
| Dave Patrick ....Please no email replies - reply in newsgroup.
| Microsoft MVP [Windows NT/2000 Operating Systems]
| http://www.microsoft.com/protect.
|
| "dave@ (e-mail address removed)" wrote:
| | Have gotten a Trojan virus named Bookstore, NAV cannot
| | clean,delete,or quarantine file. Any ideas how to get rid
| | of this file???? at wits end
|
|

 

[Dave Patrick]

Thanks to the world of flakey wireless ISP's

--
Regards,

Dave Patrick ....Please no email replies - reply in newsgroup.
Microsoft MVP [Windows NT/2000 Operating Systems]
http://www.microsoft.com/protect.

:
| Dave:
|
| Either you clock is wrong or your ISP is delaying your post. It did not
show up until ~6pm
| but your post time is ~3:30pm.
|
| Dave L.

 

[reply to response about infected file cannot delet]

-----Original Message-----
What file?

--
Regards,

Dave Patrick ....Please no email replies - reply in newsgroup.
Microsoft MVP [Windows NT/2000 Operating Systems]
http://www.microsoft.com/protect.

:
| Have gotten a Trojan virus named Bookstore, NAV cannot
| clean,delete,or quarantine file. Any ideas how to get rid
| of this file???? at wits end


.
First I am running 2000Pro, maybe I should have put that

in there first....anyway the file that I can't fix is
WINNT\systen32\msconfd.dll... have tried many things any
help would be appreciated

 

[Dave Patrick]

Follow the instructions here.

http://securityresponse.symantec.com/avcenter/venc/data/trojan.bookmarker.html

--
Regards,

Dave Patrick ....Please no email replies - reply in newsgroup.
Microsoft MVP [Windows NT/2000 Operating Systems]
http://www.microsoft.com/protect.

:
| >
| >
| >.
| >First I am running 2000Pro, maybe I should have put that
| in there first....anyway the file that I can't fix is
| WINNT\systen32\msconfd.dll... have tried many things any
| help would be appreciated

 

[David H. Lipman]

1) If you are using WinME or WinXP, disable System Restore
http://vil.nai.com/vil/SystemHelpDocs/DisableSysRestore.htm
2) Please reboot your PC into Safe Mode
3) Perform a Full Scan of your platform and clean/delete any infectors found
4) Restart your PC and if you are using WinME or WinXP, re-enable System Restore
and then create a new Restore point
5) Perform a "final" Full Scan of your platform then report back your results


Dave



| >First I am running 2000Pro, maybe I should have put that
| in there first....anyway the file that I can't fix is
| WINNT\systen32\msconfd.dll... have tried many things any
| help would be appreciated