How to solve data infected with potential virus?

[Eric]

Does anyone have any suggestions on my case?
Format and reinstall XP with SP2 will not solve the problem, I have
reinstalled XP for user twice times, it works properly after installation,
but problem occurs after user start using it by accessing her data file
within D drive, we are using Sophos Anti-Virus, and I don't know Sophos is
doing its job, and I cannot use another brand of Anti-virus software because
of license. Does anyone have any suggestions on how to handle my situation?
The problem is I don't have a good tool to detect and remove any unknown
virus, which Sophos cannot detect it.
Thanks in advance for any suggestions
Eric

 

[Pegasus [MVP]]

Does anyone have any suggestions on my case?
Format and reinstall XP with SP2 will not solve the problem, I have
reinstalled XP for user twice times, it works properly after installation,
but problem occurs after user start using it by accessing her data file
within D drive, we are using Sophos Anti-Virus, and I don't know Sophos is
doing its job, and I cannot use another brand of Anti-virus software
because
of license. Does anyone have any suggestions on how to handle my
situation?
The problem is I don't have a good tool to detect and remove any unknown
virus, which Sophos cannot detect it.
Thanks in advance for any suggestions
Eric

www.antivirus.com.
Look for the word "Housecall".

 

[Charles W Davis]

Does anyone have any suggestions on my case?
Format and reinstall XP with SP2 will not solve the problem, I have
reinstalled XP for user twice times, it works properly after installation,
but problem occurs after user start using it by accessing her data file
within D drive, we are using Sophos Anti-Virus, and I don't know Sophos is
doing its job, and I cannot use another brand of Anti-virus software
because
of license. Does anyone have any suggestions on how to handle my
situation?
The problem is I don't have a good tool to detect and remove any unknown
virus, which Sophos cannot detect it.
Thanks in advance for any suggestions
Eric

You can download, install, update MalwareByte's Anti-Malware program here:
http://www.malwarebytes.org It will certainly pick up things that Sophos
misses.

 

[Malke]

Does anyone have any suggestions on my case?
Format and reinstall XP with SP2 will not solve the problem, I have
reinstalled XP for user twice times, it works properly after installation,
but problem occurs after user start using it by accessing her data file
within D drive, we are using Sophos Anti-Virus, and I don't know Sophos is
doing its job, and I cannot use another brand of Anti-virus software
because
of license. Does anyone have any suggestions on how to handle my
situation? The problem is I don't have a good tool to detect and remove
any unknown virus, which Sophos cannot detect it.
Thanks in advance for any suggestions

Seems to me that you need to do a more thorough scan on that data since it's
obvious that your user is getting reinfected from it. Sophos is good but
won't catch non-viral malware.

Go through these general malware removal steps systematically -
http://www.elephantboycomputers.com/page2.html#Removing_Malware

Include scanning with David Lipman's Multi_AV and follow instructions to do
all scans in Safe Mode. Please see the special Notes regarding using
Multi_AV in Vista.

http://www.elephantboycomputers.com/page2.html#Multi-AV - instructions
http://tinyurl.com/yoeru3 - download link and more instructions

When all else fails, get guided help. Choose one of the specialty forums
listed at the first link. Register and read its posting FAQ. PLEASE DO NOT
POST LOGS IN THE MS NEWSGROUPS.

Malke

 

[PA Bear [MS MVP]]

A clean install does solve the problem. You're reinfecting the machine via
the D: drive: Do something about that.

Is the D: drive an external drive? Have you scanned that drive with an
anti-virus application and an anti-spyware application (e.g., MBAM)?

 

[Jim]

Does anyone have any suggestions on my case?
Format and reinstall XP with SP2 will not solve the problem, I have
reinstalled XP for user twice times, it works properly after installation,
but problem occurs after user start using it by accessing her data file
within D drive, we are using Sophos Anti-Virus, and I don't know Sophos is
doing its job, and I cannot use another brand of Anti-virus software because
of license. Does anyone have any suggestions on how to handle my situation?
The problem is I don't have a good tool to detect and remove any unknown
virus, which Sophos cannot detect it.
Thanks in advance for any suggestions
Eric

To see if Sophos is working , try
http://www.eicar.org/anti_virus_test_file.htm
Go to bottom of page , and click on EICAR.COM . With Avast , it give
audio and visual warning . ( Test file only - no harm done )

 

[Twayne]

You can use ANY reliable online offered AV scans from anyone so license
is no excuse. I don't think you have a virus though; you need to throw
a bunch of spyware scanners at it. It's more likely a Trojan that AV
ware will not find.


Does anyone have any suggestions on how to handle my

 

[Randem]

Well, I have never heard of "I can use another AV app because of the
license" You can use anything you like and dump anything that you don't.
Where did you get that info from?

BTW: AV apps will basically only scann exe or dll's not data files. You need
to specifically tell the AV app to scan data files for it to work on data
files. Also if you don't scan your D: drive no matter what you do you may be
infected because you just re-introduce it again.

Perhaps this will help http://www.randem.com/virusproblems.html


--
Randem Systems
Your Installation Specialist
The Top Inno Setup Script Generator
http://www.randem.com/innoscript.html
Disk Read Error Press Ctl+Alt+Del to Restart
http://www.randem.com/discus/messages/9402/9406.html?1236319938

 

[Randem]

That explaination makes no sense what-so-ever. One can remove the drive and
scan it on another computer with the software installed (any AV software).
He can scan, find and repair any virus/malware then place the drive back
into the users machine.

That is what a sensible "repair man" would do anyway...

--
Randem Systems
Your Installation Specialist
The Top Inno Setup Script Generator
http://www.randem.com/innoscript.html
Disk Read Error Press Ctl+Alt+Del to Restart
http://www.randem.com/discus/messages/9402/9406.html?1236319938

 

[Randem]

Then that is not "sensible"... And one should allow the OP to think and not
try to think for them...

--
Randem Systems
Your Installation Specialist
The Top Inno Setup Script Generator
http://www.randem.com/innoscript.html
Disk Read Error Press Ctl+Alt+Del to Restart
http://www.randem.com/discus/messages/9402/9406.html?1236319938