Virus removal

[Jack Tomlinson]

Am sending this request for another person who is using XP
(which I do not). She had a W32/keysky@mm virus on her
machine. She had 522 infected files. I used a Stinger
file and removed 521 of the infected files. I could not
remove the file: C:\windows\FVProtect.exe file for I got
the message: "Access denied". Now I am sure that means
you must be the Administrator to get access, but she says
she never set herself up as an administrator. Norton Anti-
Virus program could not remove the infected file either
for the same reason.
Does anyone have any ideas how I can access this file so I
can remove the virus from her machine.
This is my first time on this forum, so I apologize ahead
of time if I am using the wrong protocol or something. I
also extend my thanks to any who respond to my request.
Thank you; Jack

 

[Will Denny]

Hi

In which folder is the infected file?

 

[Marie]

i am having the same problem with norton, and the adware
file msbb.exe. i can't find it, can't delete it, i don't
know what to do. i've been working on it for over a week,
if anyone has any info please help!!

 

[David H. Lipman]

There are anti virus News Groups specifically for this type of discussion.

microsoft.public.scripting.virus.discussion
microsoft.public.security.virus
alt.comp.virus
alt.comp.anti-virus

Here are the directions to remove the W32/Netsky (there is no W32/keysky)

1) Disable System Restore
http://vil.nai.com/vil/SystemHelpDocs/DisableSysRestore.htm
2) Reboot the infected PC into Safe Mode
3) Using Stinger, perform a Full Scan of your platform and clean/delete any
infectors found
4) Restart the infected PC and perform a "final" Full Scan of your platform
5) Re-enable System Restore and re-apply any System Restore preferences,
(e.g. HD space to use suggested 400 ~ 600MB),

6) Reboot the infected PC.
7) Create a new Restore point
8) Please report back your results

If it still can not be deleted, I have additional instructions.

Dave





| Am sending this request for another person who is using XP
| (which I do not). She had a W32/keysky@mm virus on her
| machine. She had 522 infected files. I used a Stinger
| file and removed 521 of the infected files. I could not
| remove the file: C:\windows\FVProtect.exe file for I got
| the message: "Access denied". Now I am sure that means
| you must be the Administrator to get access, but she says
| she never set herself up as an administrator. Norton Anti-
| Virus program could not remove the infected file either
| for the same reason.
| Does anyone have any ideas how I can access this file so I
| can remove the virus from her machine.
| This is my first time on this forum, so I apologize ahead
| of time if I am using the wrong protocol or something. I
| also extend my thanks to any who respond to my request.
| Thank you; Jack