Re: w97m.marker.gen virus

From: ABA (anonymous_at_discussions.microsoft.com)
Date: 05/16/04 

Date: Sun, 16 May 2004 12:25:28 -0700

Thanks for the reply!

We have actually ran Norton both ways - with system
restore on and off. Either way, Norton tells us that a
virus has been located but that it is unable to
delete "Failed attempt to delete." The virus is still on
the computer, so I am not sure how we can get rid of it.
We've tried everything we know of. I don't understand
why Norton cannot delete the virus when it's located it.
Any additional help is welcomed.

>-----Original Message-----
>Hi ABA,
>
>The restore folder is a function of the System Restore
feature, which stores
>important files in a more or less protected folder in
case they are
>deletected. While W97M/Marker is currently benign, it
nonetheless could
>theoretically become active in this situation.
>
>You describe that you have turned System Restore "on and
off." Have you
>attempted to run the scan and clean the infection while
System Restore was
>off? Why were you unable? Does the virus come back
somehow?
>
>Sincerely,
>Benjamin "Trafton" Johnstone-Anderson
>Microsoft MVP - Windows Security
>Remove "SPAM" from email address to reply!
>Security Manifest: www.msmvps.com/trafton/
>
>"ABA" <anonymous@discussions.microsoft.com> wrote in
message
>news:d9bb01c43aef$14187b40$a001280a@phx.gbl...
>> We need help deleting/removing the w97m.marker.gen
virus
>> from our computer.
>>
>> We have reviewed and printed instructions from Norton
>> (which there is no "removal tool" for this virus) and
>> Norton updates have been installed, but Norton cannot
>> delete, remove, or quarantine the virus. This virus
>> appears to be in the restore folder. We have been
advised
>> to disable the "restore system", so we have turned the
>> system restore on and off again several times. We just
>> recently upgraded to Windows XP.
>>
>> Is it safe to leave this virus in the restore folder??
Is
>> there any other way to delete this virus?
>>
>> Any help is very much appreciated!
>>
>>
>
>
>.
>

Relevant Pages

  • Re: malicious code as "amyuni PDF printer converter?"
    ... Discussions in Home Users Security Discussion: ... Discussions in Virus Discussions: ... restore was unsuccessful and I have since disabled the restore at ... the recommendation of Norton. ...
    (microsoft.public.windowsxp.help_and_support)
  • Re: I had a computer virus that ATT corrected but
    ... virus protector,but is in reality a virus. ... Then I go to the Microsoft restore facility and restore my computer to ... seeing isn't a sign that you have already got the malware -- it's part ... I do a Ghost ...
    (soc.retirement)
  • Re: I had a computer virus that ATT corrected but
    ... virus protector,but is in reality a virus. ... Then I go to the Microsoft restore facility and restore my computer to ... seeing isn't a sign that you have already got the malware -- it's part ... I do a Ghost ...
    (soc.retirement)
  • Re: XP Home & hacktool
    ... virus in the restore point. ... > The infector is rendered impotent while in quarantine. ... > FireWall to allow it to download the needed AV vendor related files. ...
    (microsoft.public.windowsxp.help_and_support)
  • Re: Need some general purpose advice on how to handle viruses and noxious ad-ware
    ... >in safe mode and a lot of registry editing. ... Among other things, Norton ... >restore points which might include the trojan. ... but as it will chain through the states where the virus was ...
    (microsoft.public.windowsxp.general)