Computing.Net > Forums > Security and Virus > Deleting Virus Infected File?

Computer Problems? Computing.Net has over 1,000,000 posts about all things technology related! Over 90% answered within 24 hours! Click here to start participating now! Also, be sure to check out the New User Guide.

Deleting Virus Infected File?

Reply to Message Icon

Name: ericcc
Date: April 18, 2005 at 09:31:37 Pacific
OS: w2k
CPU/Ram: 400
Comment:

I ran my Norton Antivirus on w2k machine, and the system discovered a virus (w32.spybot.worm), Norton AV failed to delete it but only quarantined it. I want to manually delete this infected file myself, because after running the AV the system seems to be still infected, for example some words/charaters on web pages are so small that they are unreadable - which was not so before. But I'm afraid it could have a damaging effect to my system due to the directory path (c:\winnt\system32\svhost.exe)
Will it be safe to delete this file?



Sponsored Link
Ads by Google

Response Number 1
Name: bofra
Date: April 18, 2005 at 11:27:11 Pacific
Reply:

reboot in safe mode/vga mode,
scan with anti virus in safe mode,
check for w32.spybot.worm using regedit search for in:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\RunOnce
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\RunServices
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\RunServices
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\RunOnce
HKEY_CURRENT_USER\Software\Microsoft\OLE
check
edit, c:\windows\win.ini
edit with notepad,check for :
run=%windir%\svchost.exe
if present, delete line save and exit,


-1
Reply to Message Icon

Related Posts

See More


Your Ultimate Home PC Sec... about:blank in Win 98



Post Locked

This post is quite old and has been locked from receiving new replies. Please create a new posting instead.


Go to Security and Virus Forum Home


Sponsored links

Ads by Google


Results for: Deleting Virus Infected File?

Virus infection - Can't delete them www.computing.net/answers/security/virus-infection-cant-delete-them/13270.html

infected files www.computing.net/answers/security/infected-files/3087.html

Deleting virus in safe mode www.computing.net/answers/security/deleting-virus-in-safe-mode/11095.html