Re: w97m.marker.gen virus

From: Trafton (traftonofjj2SPAM_at_yahoo.com)
Date: 05/16/04 

Date: Sun, 16 May 2004 13:49:12 -0800

Hi ABA,

This is quite odd. Try getting a second opinion:

http://housecall.trendmicro.com/

See if that comes up with any detections.

Sincerely,
Benjamin "Trafton" Johnstone-Anderson
Microsoft MVP - Windows Security
Remove "SPAM" from email address to reply!
Security Manifest: www.msmvps.com/trafton/

"ABA" <anonymous@discussions.microsoft.com> wrote in message
news:dc4a01c43b7b$8be03780$a501280a@phx.gbl...
> Thanks for the reply!
>
> We have actually ran Norton both ways - with system
> restore on and off. Either way, Norton tells us that a
> virus has been located but that it is unable to
> delete "Failed attempt to delete." The virus is still on
> the computer, so I am not sure how we can get rid of it.
> We've tried everything we know of. I don't understand
> why Norton cannot delete the virus when it's located it.
> Any additional help is welcomed.
>
>
>>-----Original Message-----
>>Hi ABA,
>>
>>The restore folder is a function of the System Restore
> feature, which stores
>>important files in a more or less protected folder in
> case they are
>>deletected. While W97M/Marker is currently benign, it
> nonetheless could
>>theoretically become active in this situation.
>>
>>You describe that you have turned System Restore "on and
> off." Have you
>>attempted to run the scan and clean the infection while
> System Restore was
>>off? Why were you unable? Does the virus come back
> somehow?
>>
>>Sincerely,
>>Benjamin "Trafton" Johnstone-Anderson
>>Microsoft MVP - Windows Security
>>Remove "SPAM" from email address to reply!
>>Security Manifest: www.msmvps.com/trafton/
>>
>>"ABA" <anonymous@discussions.microsoft.com> wrote in
> message
>>news:d9bb01c43aef$14187b40$a001280a@phx.gbl...
>>> We need help deleting/removing the w97m.marker.gen
> virus
>>> from our computer.
>>>
>>> We have reviewed and printed instructions from Norton
>>> (which there is no "removal tool" for this virus) and
>>> Norton updates have been installed, but Norton cannot
>>> delete, remove, or quarantine the virus. This virus
>>> appears to be in the restore folder. We have been
> advised
>>> to disable the "restore system", so we have turned the
>>> system restore on and off again several times. We just
>>> recently upgraded to Windows XP.
>>>
>>> Is it safe to leave this virus in the restore folder??
> Is
>>> there any other way to delete this virus?
>>>
>>> Any help is very much appreciated!
>>>
>>>
>>
>>
>>.
>>

Relevant Pages

  • Re: Backdoor.agent.ba
    ... >Restart computer & Turn System Restore On ... >> that says I have a VIRUS Trojan ... >> Norton initially told me I had a similiar virus and I ... >> than downloaded a free copy of software from AVG. ...
    (microsoft.public.security.virus)
  • Re: Start Menu + System Restore
    ... This is the only locale that uses Norton and is all fresh PC's. ... I'll be migrating this to BitDefender due to AV software having impact above and beyond any virus ever encountered in 10+ years of computing at these locales! ... Try running System Restore from Safe Mode. ... Event Log is clean- has some MSI Installers starting/stopping for Norton and Windows Update, but no errors or other indications in the time frame the problem occurred. ...
    (microsoft.public.windowsxp.help_and_support)
  • Re: Anyone recognise this trojan?
    ... Turn off System Restore, reboot, and run a virus scan again. ... consider installing a first-rate, comprehensive, internet security program: ... Norton Internet Security 2004 ...
    (microsoft.public.windowsxp.help_and_support)
  • Manual scan detects nothing, but infected file wasnt deleted
    ... why Norton is giving you the "Unable to repair file" ... You will need to disable System Restore, reboot, Norton ... >was a virus in the file and that it was unable to repair ...
    (microsoft.public.security.virus)
  • Re: Recurring Virus.
    ... System Restore completely, reboot, then re-enable it. ... How to turn on and turn off System Restore in Windows XP ... I have Norton Internet Security and had to disable ... | Trojan Low Zones virus. ...
    (microsoft.public.windowsxp.perform_maintain)