Virus deletion issue

  gatehill 18:59 18 Feb 05
Locked

A friend's 18 month old PC was running very slowly and asked my help. The PC has Windows XP (with SP2) and they run Norton AV.

They regularly access the internet so firstly I installed AdAware. This detected over 700 "nasties" which we deleted. We then ran the online Norton virus check and this found over 400 files infected with 4 rogue diallers and around 4 viruses like adware.huntbar.

I followed the various Symantec removal instructions, including downloading and running the relevant removal tools. Some of the diallers were removed but after scanning (in Safe Mode) and checking the registry where directed by the Symantec removal document, there was no obvious evidence of the previously detected viruses.

I also downloaded Spybot and this found around 30 rogue entries, including reference to the diallers that were not evident (or had been deleted) in the prior removal attempt. We deleted these nasties.

The PC was certainly running much more quickly. However, we have since re-run the Symantec online virus check and still found over 300 infected files.

I would like to know if I need to still need to try to remove the alleged viruses/files or if the affected files can stay where they are?

  VoG II 19:10 18 Feb 05

Have you turned System Restore off then on again? Some viruses may have been in Restore Points. click here

  Jeffers22 19:10 18 Feb 05

Depends on the infection in the files and the files themselves. If they can recreate the bad stuff, (and it sounds like at least some of them have) they need to be deleted. If it was me I'd get the list of infected/affected files checked over and probably then get rid and be prepared to repair any damge this may cause at a later stage.

  Jeffers22 19:12 18 Feb 05

Good point about system restore - I always forget that because it is turned of in my HyperOssed PC.

  Jeffers22 19:12 18 Feb 05

sorry - turned oFF

  gatehill 19:20 18 Feb 05

Thanks for the speedy response, folks. I turned System Restore off (then on) when directed to by the Symantec removal document. Could I still try to restore to a much earlier date, say 6 months ago?

This thread is now locked and can not be replied to.

How to get Windows 10 for free | How to install Windows 10: There is still a way to avoid paying…

1995-2015: How technology has changed the world in 20 years

Hands-on with the Star Wars fighting drones you can fly yourself

15 macOS Sierra tips | How to use macOS Sierra: Secret tricks and best new features in Apple's new…