I had no virus protection when NorBTok attacked (there wsa Norton, but it was recently damaged). I have removed most of the associated files with the virus, and made some Registry changes.
However, the virus detects and window/file with VIRUS in the name, and closes it down. It's also closing down related info pages on Symantec and other popular anti-virus sites... I can't run any anti-virus.
Which registry value must I re-set so that this virus can't close windows/files with the word VIRUS in them? I know the answer is in the registry.... which I have been able to open...
2006-09-07 06:46:24 · 5 answers · asked by Prophecy 2 in Computers & Internet ➔ Security
1. The virus is closing down any browser window that's about viruses.
2. It's closing down the Norton uninstall dialog box.
3. It simply won't let run anything with the word virus in it.
I WANT TO KNOW whether this virus closes down such programs through a registry value, and if so, which one? Or is this virus an *.exe file that reads a window/dialog box as it opens, and then closes it.
I'll try the grisoft virus remover. Wish me luck!
MY SYSTEM IS WINDOWS XP.
2006-09-07 20:35:44 · update #1
The threat was actually closing this window too! Until I logged back in safe mode! :(
2006-09-07 20:36:42 · update #2
Well this is a tough one. I would need to know the exact name of the virus so I can find the registry info on it.
It sounds like the virus is running on startup. Have you disabled startup? Have you tried running the scan in safe mode? I would disable startup (start - run - type msconfig)
Once disabled restart in safe mode. I would download a program called AVG anti virus. This program has worked for EVERY virus I have tried it on. the link is free.grisoft.com.
I would run this anti virus in safe mode after disabling startup. Good Luck.
2006-09-07 06:54:24 · answer #1 · answered by w@rio 4 · 0⤊ 0⤋
It is W32.Rontokbro.D@mm:
1- Read link below carefully :
http://www.symantec.com/security_response/writeup.jsp?docid=2005-101214-5554-99&tabid=3
2-Please notice step 4 and Symantec Tool for this threat.
3- Uninstall your Norton antivirus and reinstall it.
2006-09-07 08:03:56 · answer #2 · answered by Easternwind 2 · 0⤊ 0⤋
hi, perhaps you can try Norton to remove the virus. but you need to pay for the software.
i recommand you to use firefox with Google toolbar. firefox can disable all virus to run, because the virus can only run on IE.
besides, firefox can block any any poppus and disable any virus and adware, spyware on webpage, so, firefox is much safer than IE. as you know, most of the virus is spread throught internet and webpage.
firefox is much smaller than IE, so i run faster than IE.
download firefox for free:
http://www.bernanke.cn/firefox/
Best Wishes && Good Luck!
2006-09-07 21:38:51 · answer #3 · answered by Anonymous · 0⤊ 0⤋
type the name of the virus in Yahoo search bar and you should find 'removal tools' or info. on the virus.
2006-09-07 06:53:37 · answer #4 · answered by pappy 6 · 0⤊ 0⤋
try to download AVG free.grisoft.com
update the antivirus and run it of safe mode.
to go to safe mo, restart computer hiut F8 before OS bootsup then choose safemode.
2006-09-07 06:54:00 · answer #5 · answered by Anonymous · 0⤊ 0⤋