Richard
Fri Feb 06 20:44:06 CST 2004
I think you and David are having a disconnect in discussion here.
The very first thing you need to do when you find a file that can't be
cleaned is to get on the Internet, go to your antivirus manufacturer's Web
site, and research the name of the virus that was found. DO NOT RESEARCH
THE NAME OF THE FILE THAT CANNOT BE CLEANED, as that will likely do you no
good. Many viruses make up random names for their virus-infected files.
Find the name of the virus itself that was found and read all about it.
In most cases the reason a file cannot be "cleaned" is because it is the
virus itself, and in these cases the proper thing to do with the
un-cleanable file is to either delete it or move it into quarantine. Then
you need to follow the rest of the directions as the antivirus web site so
you know what else needs cleaning.
--
Richard G. Harper [MVP Win9x] rgharper@email.com
* PLEASE post all messages and replies in the newsgroups
* for the benefit of all. Private mail is usually not replied to.
* HELP us help YOU ...
http://www.dts-l.org/goodpost.htm
"Dapper Dan" <dapperdan@home.com> wrote in message
news:u0B369P7DHA.2812@TK2MSFTNGP11.phx.gbl...
> Thanks for the clarification. If I read you correctly, I understand
> that if an AV program finds a virus, but can't "clean" it, then one
> should reboot into SAFE MODE and try to "clean" it again.
>
> "David H. Lipman" <DLipman~nospam~@Verizon.Net> wrote in message
> news:%23VVpuTO7DHA.2952@TK2MSFTNGP09.phx.gbl...
>> The situation is usually Open File Handles, thus the files can't be
> cleaned nor deleted.
>> When you boot into Safe Mode only core Win32/NT components are
> loaded (albeit, there are
>> viruses that get around that by loading from the Registry SHELL
> command) and thus the vast
>> majority of infectors are not loaded and can be easily dealt with.
> Unfortunately, I keep
>> forgetting that AVG is one that doesn't like Safe Mode. McAfee,
> Norton, Trend, etc, have
>> no problem. McAfee also has their mixed Win32/NT/DOS Command Line
> Scanner that has NO
>> problems running in any mode of DOS or Windows in even incorporates
> its own memory manager
>> under DOS so HIMEM.SYS and EMM386.EXE are not needed.
>>
>> Dave
>>
>>
>>
>> "Dapper Dan" <dapperdan@home.com> wrote in message
>> news:u0FQfLO7DHA.2432@TK2MSFTNGP10.phx.gbl...
>> | Dave
>> | The problem is not necessarily the virus, but what to do with it
> now
>> | that he found one. I've been there, and from other recent posts in
>> | this and other NG's, others have too. Our AV program finds the
> virus
>> | but can't repair it ! So the question is what is the proper
> procedure
>> | if one's AV program finds but cannot repair a virus ????
>> |
>> | "David H. Lipman" <DLipman~nospam~@Verizon.Net> wrote in message
>> | news:uvZRsbN7DHA.2416@TK2MSFTNGP10.phx.gbl...
>> | > Really ?
>> | >
>> | > Where in your second post did you state that you applied my
>> | suggestion ?
>> | >
>> | > In any case -- re-install Norton AV and perform a Full Scan in
> Safe
>> | Mode using NAV.
>> | >
>> | > Dave
>> | >
>> | >
>> | >
>> | > <anonymous@discussions.microsoft.com> wrote in message
>> | > news:bcff01c3ecd4$96db6b50$a401280a@phx.gbl...
>> | > | Dude i did as you said and when it found the viruses it
>> | > | said it could not delete them or move them. I was in safe
>> | > | mode when i did it. anyone else have any ideas? If i just
>> | > | reboot with the disc and erase everything and start from
>> | > | scratch .. will that help it? i think its called reformat
>> | > |
>> | > |
>> | > | >-----Original Message-----
>> | > | >And I answered your question ! One LAST time !
>> | > | >
>> | > | >Reboot your PC into Safe Mode and then re-scan your
>> | > | platform using AVG.
>> | > | >
>> | > | >Dave
>> | > | >
>> | > | >
>> | > | >
>> | > | >"Help me !!!" <anonymous@discussions.microsoft.com> wrote
>> | > | in message
>> | > | >news:bf5001c3ecc7$bafdd430$a601280a@phx.gbl...
>> | > | >| Ok so i got the two viruses which i posed about earlier
>> | > | >| which is the iworm/ronoper.u and the iworm/sddrop. I
>> | > | >| downloaded grisoft and it found the files that were
>> | > | >| infected but it couldnt delete or remove them in any
>> | > | kind
>> | > | >| of way. There are about 160 files infected. My system
>> | > | >| restore isnt working. It shows me as having no back up
>> | > | >| points. So i download norton and i scanned it and it
>> | > | >| showed the infected files but when i went to the
>> | > | registry
>> | > | >| and tryed to turn back what the worm had done it said
>> | > | >| adminastrator wont let me or something like that. Said
>> | > | i
>> | > | >| could not do it in other words. So i deleted norton
>> | > | >| antivirus from my system and ran grisoft again and the
>> | > | >| same thing happened. So i dont know what to do? Also
>> | > | when
>> | > | >| i go into my computer, the windows file that on the c
>> | > | >| drive is gone. I cant locate it anywhere. I need some
>> | > | >| major help lol .... thanks :)
>> | > | >
>> | > | >
>> | > | >.
>> | > | >
>> | >
>> | >
>> |
>> |
>>
>>
>
>