Unable to delete or quarantine infected file

[TAV2]

I received a New Years gift in the form of a Trojan Horse
file, (MSnarrator.exe) which neither NAV nor I can
delete. Can someone provide me with a means to delete
this file from my system?

Thanks

 

[Taurarian]

All instructions are provided by Symantec
http://securityresponse.symantec.com/avcenter/venc/data/trojan.narat.html

 

[Jim Gnecco]

I have the same problem. Norton automatically deletes
the file but it just keeps coming back. I have to
repeatedly "OK" the Virus Alert which tells me the file
was deleted. This apparently repeats over and over.
Last time I OK'd the Alert I counted 157 repetitions of
the message.

There is another msg re the same problem at about 7:37 PM
yesterday. Take a look at that one. I have attempted to
contact the fellow about it.

Do you know what the msnarrator.exe file is?

I am about ready to spend the $35 to get MS help.

Let's share info on this one till we get it resolved.


Jim Gnecco

Newtown, PA

215-579-9189

 

[rick]

I have similar problem, which I just posted. Did you get
feedback on your problem? If so, would appreciate
getting copy. Thanks!

 

[Rick]

Jim,

I don't know if you have solved your problem yet, but I
have been able to delete the files created by the
virus "trojan.gema" and I suspect that the same
techniques will work for you.

The best approach is for you to go to Symantec's support
site: "http://securityresponse.symantec.com" and then go
to their virus removal support section.

In general, you will need to do the following (and this
depends upon the Norton Anti-Virus Program, so you should
get this from Symantec - it's well worth it if you don't
already have it):
1. Run your computer in "safe mode" (symantec has
details on how to)
2. Disable the "restore" feature during repair activity
(again, symantec has details)
3. Run the Norton Anti-virus to identify your specific
problems
4. This may solve your problems; if there is a need to
repair your registry, then you will have to proceed
further.
5. If you have residual entries in your registry related
to the virus removed by the Anti-virus program, then you
will have to repair the registry (symantec has details on
this as well!)

Good luck - hope this helps!!

Rick