Re: Suspected Virus/Worm Causing PC to Power Off

From: jimr (jimr_at_discussions.microsoft.com)
Date: 03/12/05 

Date: Sat, 12 Mar 2005 09:23:01 -0800

Dave,

Interesting - when I ran Sysclean in the SafeMode, it found no viruses.
But, the log indicated that either "An error occured while scanning file
....(listing of numerous files)..." or "Could not set file for reading on
..(listing of numerous files)...." due to "Access is denied." One other
thing of interest, even in SafeMode I cannot move files or execute my Norton
antivirus program. Additionally, the defrag program will not execute.

I do have a firewall, Netgear Firewall Router; up to date antivirus program,
Norton; & I have installed all Microsoft patches (my system is set to
automatically update).

Any thoughts on how to proceed?

"David H. Lipman" wrote:

> From: "jimr" <jimr@discussions.microsoft.com>
>
> | David,
> |
> | Something is preventing me from disabling system restore. Each time I
> | attempt to disable system restore, I get an error message indicating that
> | there is a problem with one of drives that prevents system restore to be
> | disabled. It instructs me to restart & try again. Any thoughts on how to
> | overcome this problem? Thanks.
> |
> | jimr
> | | "David H. Lipman" wrote:
>
> Bypass that part of the instructions.
>
> Patch and then reboot your computer then perform the following...
>
> In addition to what Malke stated...
>
> Dump the contents of the IE Temporary Internet Folder cache (TIF)
>
> start --> settings --> control panel --> internet options --> delete files
>
> Open a Command Prompt.
>
> In the Command Prompt type the following...
>
> CHKDSK C: /F
>
> If it replies..
> "Chkdsk cannot run because the volume is in use by another process.
> Would you like to schedule this volume to be checked the next time the system restarts?
> (Y/N)"
>
> Choose - Y
>
> type; EXIT
>
> Reboot the PC.
>
> A full Check Disk will want to be performed, allow it.
>
> When it reboots, perform a defragmentation of the hard disk.
>
> You can get to the Defragmenting program easily by executing; dfrg.msc
>
> Start --> run ->
> type; dfrg.msc
>
>
> --
> Dave
>
>
>

Relevant Pages

  • Re: trojan horse proxy.f
    ... Turn off the System Restore function ... Reboot the PC ... | antivirus program but it now didn't detect it. ...
    (microsoft.public.security.virus)
  • Re: Trojan in System Volume Information
    ... System Tools> System Restore, System Restore Settings), reboot, then ... > My AVG antivirus program found "Trojan horse Downloader. ...
    (microsoft.public.windowsxp.security_admin)
  • Re: I cant find a file thats been identified as a trojan...
    ... Your virus scan won't clean system restore files because they are protected ... You must disable System Restore and reboot (preferably into ... SafeMode) and run your virus scan. ...
    (microsoft.public.windowsxp.perform_maintain)
  • Re: trojan horse proxy.f
    ... the "new System Restore point" (never had to greate one so ... >- Reboot the PC ... my avg antivirus program told me that i ... >| antivirus program but it now didn't detect it. ...
    (microsoft.public.security.virus)
  • Re: Invalid Procedure Call or Argument
    ... annoyances), cleaned infection (with System Restore turned off?), still had ... Boot into Safe Mode and use MS Config to go into Diagnostic Mode. ... note what Services and Startups AVG ... Reboot normally, ...
    (microsoft.public.windowsxp.help_and_support)