Virus deletion issue

  gatehill 18:59 18 Feb 2005

A friend's 18 month old PC was running very slowly and asked my help. The PC has Windows XP (with SP2) and they run Norton AV.

They regularly access the internet so firstly I installed AdAware. This detected over 700 "nasties" which we deleted. We then ran the online Norton virus check and this found over 400 files infected with 4 rogue diallers and around 4 viruses like adware.huntbar.

I followed the various Symantec removal instructions, including downloading and running the relevant removal tools. Some of the diallers were removed but after scanning (in Safe Mode) and checking the registry where directed by the Symantec removal document, there was no obvious evidence of the previously detected viruses.

I also downloaded Spybot and this found around 30 rogue entries, including reference to the diallers that were not evident (or had been deleted) in the prior removal attempt. We deleted these nasties.

The PC was certainly running much more quickly. However, we have since re-run the Symantec online virus check and still found over 300 infected files.

I would like to know if I need to still need to try to remove the alleged viruses/files or if the affected files can stay where they are?

  VoG II 19:10 18 Feb 2005

Have you turned System Restore off then on again? Some viruses may have been in Restore Points. click here

  Jeffers22 19:10 18 Feb 2005

Depends on the infection in the files and the files themselves. If they can recreate the bad stuff, (and it sounds like at least some of them have) they need to be deleted. If it was me I'd get the list of infected/affected files checked over and probably then get rid and be prepared to repair any damge this may cause at a later stage.

  Jeffers22 19:12 18 Feb 2005

Good point about system restore - I always forget that because it is turned of in my HyperOssed PC.

  Jeffers22 19:12 18 Feb 2005

sorry - turned oFF

  gatehill 19:20 18 Feb 2005

Thanks for the speedy response, folks. I turned System Restore off (then on) when directed to by the Symantec removal document. Could I still try to restore to a much earlier date, say 6 months ago?

This thread is now locked and can not be replied to.

Elsewhere on IDG sites

iPhone X review

Political cartoons in 2017: Chris Riddell, Rebecca Hendin and Dave Brown on what it’s like to…

The best iPhone for 2017

Tennis : comment regarder la finale de la Coupe Davis 2017 ?