newbie question about norton - "there are still viruses on your computer"

[Larry]

I understand Norton AV is rated highly by many. Most of the time I use it,
it finds a few viruses. It suggests I quaranteen them. It then fails to
quaranteen them. I then try to delete them. It then fails to delete them,
or deletes some but not others. Next it always gives the statement there
are still viruses left on your computer. This seems to be the rule not the
exception. It never says "congratulations you are now free of viruses"
which is what I'd like it to say.

I wan't simple steps to follow, concluded with a message that reassures me
I'm OK.

What good is a antiviral program that fails to be able to quaranteen so
often? And when I follow all advice given as best I can, I always get the
message that my computer is still infected with viruses.

Have others found this to be a common occurance? Is McAfee like this? I
think I am going to switch to McAfee.

 

[Beauregard T. Shagnasty]

Quoth the raven named Larry:

I understand Norton AV is rated highly by many. Most of the time I
use it, it finds a few viruses. ...

Crikey! You need to begin to practice safe hex!
http://www.claymania.com/safe-hex.html

What is the date of your latest Norton sig file?

 

[Larry]

Quoth the raven named Larry:


Crikey! You need to begin to practice safe hex!
http://www.claymania.com/safe-hex.html

What is the date of your latest Norton sig file?

I have the latest Norton virus definitions updates - just updated today.
What is "sig file"? It's Norton 2002. The virus is the HelpExp.exe.
Norton can't quaranteen it or delete it. Symantec's web page tells you to
delete it and than make a change in the registry - in Current Version Run -
delete syslaunch.exe (it says to backup that key in the registry - I'm very
inexperience with changing the registry). But if you can't use Norton to
delete it - than I'm not sure I should make the change in the registry. Any
advise? Thanks in advance.

Is it bad manners to also post my question about eliminating the virus to
alt.comp .virus?

 

[Larry]

Quoth the raven named Larry:


Crikey! You need to begin to practice safe hex!
http://www.claymania.com/safe-hex.html

What is the date of your latest Norton sig file?

Symantec suggests that with XP I should back up only part of the registry (a
Key?) before making a change in it. Is this true? - I'm not sure why not
backup the whole registry? That's what I know how to do in the past.

 

[Beauregard T. Shagnasty]

Quoth the raven named Larry:

I have the latest Norton virus definitions updates - just updated
today. What is "sig file"?

Virus signature file. The update you get, the "database" of viruses.

Sorry, I don't use Norton.

 

[Gabriele Neukam]

On that special day, Larry, ([email protected]) said...

I have the latest Norton virus definitions updates - just updated today.
What is "sig file"? It's Norton 2002.

Better update, to 2004. The old "engine" doesn't know the new tricks; so
it cannot deal with them. Signatures alone don't help much. You can't
keep a door closed if it still has a very old fashioned lock which is
easy to pick.

The virus is the HelpExp.exe.

A common pest nowadays. Some links have already been given in this
group, eg.

http://www.kephyr.com/spywarescanner/library/helpexpress/index.phtml

A manual removal instruction is given in

<[email protected]>

which involves registry editing, too.

Norton can't quaranteen it or delete it. Symantec's web page tells you to
delete it and than make a change in the registry - in Current Version Run -
delete syslaunch.exe (it says to backup that key in the registry - I'm very
inexperience with changing the registry). But if you can't use Norton to
delete it - than I'm not sure I should make the change in the registry. Any
advise?

Start your computer in Safe Mode and try if the removal will work. In
Safe Mode, many programs are not run at startup. Programs that do
currently run, will never be touched or even removed by Antivirus
programs. This is a problem which many new worms are taking advantage
of. They alter the registry, so that they will be running when the
computer has booted, and apply a lot of tricks to avoid getting
terminated.


Gabriele Neukam

(e-mail address removed)