Virus help needed

[Doug Lowe]

Hi, I have a computer that's seriously infected by a virus. The computer
didn't have antivirus, so I purchased a new NAV 2004 but can't get it to
install. I've run symantec's online detection, it says I have one file
infected with welchia and another with gaobot. I've downloaded & run the
removal tools. They indicate that the virus was found and removed, but the
symptoms persist and if I run the online tool again the virus is still
there.

NAV runs through its installation routine fine, but then won't start when I
dclick the icon. I suspect the virus is killing it on startup. I also can
barely run msconfig and regedit. Msconfig will stay up for a few seconds,
then dissappear. Sometimes, if I'm quick, I can get all the startups
disabled and manage to restart. Then, the computer reboots and seems fine
for 30 second or so. If I run msconfig, the startup will be disabled, but
then after a few seconds, the startup checkbox will check itself, and a few
programs in the startup tab get selected. One of them is msnmsgr.exe, which
turns out to be one of the infected files.

Any tips on how we might be able to run Norton?

-Doug

 

[Lance Joiner]

Tryt booting in safe mode and run the antivirus.

 

[Doug Lowe]

We tried that, same result.

Tryt booting in safe mode and run the antivirus.

when

 

[tarquinlinbin]

We tried that, same result.

Boot in Normal mode,disable system restore,reboot in safe mode,run the
virus removal tools,see how that goes..

And remember,never do anything without protection again..!!

 

[Bee]

Use the VB utility, xp_emergencyutil.exe, to make a special copy of
Regedit which is rendered immune to malicious attacks. You then can
safely execute the repair operation on that copy.
Please refer to: http://www.dougknox.com/
Click Windows XP Utilities (Lt. pane)
Scroll down and click "Create Emergency Copies of Critical XP
System Utilities (Regedit, MSConfig and Task Manager)"
Download the xp_emergencyutil.zip file and follow the prompts.
(Courtesy of MVP Doug Knox)

Bee.

 

[Rudy]

-----Original Message-----
Hi, I have a computer that's seriously infected by a virus. The computer
didn't have antivirus, so I purchased a new NAV 2004 but can't get it to
install. I've run symantec's online detection, it says I have one file
infected with welchia and another with gaobot. I've downloaded & run the
removal tools. They indicate that the virus was found and removed, but the
symptoms persist and if I run the online tool again the virus is still
there.

NAV runs through its installation routine fine, but then won't start when I
dclick the icon. I suspect the virus is killing it on startup. I also can
barely run msconfig and regedit. Msconfig will stay up for a few seconds,
then dissappear. Sometimes, if I'm quick, I can get all the startups
disabled and manage to restart. Then, the computer reboots and seems fine
for 30 second or so. If I run msconfig, the startup will be disabled, but
then after a few seconds, the startup checkbox will check itself, and a few
programs in the startup tab get selected. One of them is msnmsgr.exe, which
turns out to be one of the infected files.

Any tips on how we might be able to run Norton?

-Doug


.
Hi

You need to prepare a boot up set on another machine,
there is a folder on the CD under tools EDisk that makes
the floppies for you, run it on boot and hopefully that
will do the job