AVG Virus Scanner & LoveSanA Virus.

  [DELETED] 16:55 22 Aug 2003

After suffering an attack from MSBlaster, removed the virus, installed MS patch & activated Zonealarm firewall.
After using PC for a couple of hours AVG says 'LoveSanA virus found run full scan'

I do this and AVG reports no virus found.

The machine otherwise behaves fine & does not shut down like it did when infected.

What's going on ?

Is my machine really clean now & if so how do I stop this message from AVG ?

  [DELETED] 17:57 22 Aug 2003

AVG has probably found a copy in your System Restore files - Windows will not let AVG or any other AV software touch any files contained within System Restore.

You need to disable System Restore, remove the worm, then re-enable System restore.

If you go to click here you can download a simple tool that will definitely work, provided you follow the instructions very carefully (I suggest you print them).

Instructions on how to enable / disable System restore are in the link above.

  [DELETED] 18:16 22 Aug 2003

Thanks, I'll give it a try when I get home - sounds like the answer to me.

I'm still new to XP & never thought about the restore system keeping a copy of the bloody thing until you mentioned it.

  [DELETED] 19:04 22 Aug 2003

click here

Provides more information and full manual removal which Antivirus cannot do.

  [DELETED] 19:37 22 Aug 2003

"Provides more information and full manual removal which Antivirus cannot do."

What on earth are you talking about? The link I gave has a fully automated tool that does exactly what your 'manual removal' method does, i.e. deletes one registry key and deletes one file.

However, unlike your manual method, the removal tool also scans all drives for any other instances of msblast.exe (typically to be found within the hidden System restore directory).

It also contains detailed information about what the worm does and does not do, how it spreads, how to avoid reinfection etc.

Crucially, it also has clear instructions about how to disable (and then re-enable) Syatem restore, to prevent re-infection in the future if System Restore is used.

Your 'more information' page does not even mention this basic step.

  [DELETED] 11:50 26 Aug 2003

No sign of the worm now anywhere.

Thanks a lot

This thread is now locked and can not be replied to.

Elsewhere on IDG sites

How to watch the World Cup for free on TV and online

Adobe's brand-new video editing app Project Rush works across your computer, tablet and phone

Best external graphics cards (eGPUs) for Mac

Les meilleurs jeux pour Android (2018)