Computer Problems? Computing.Net has over 1,000,000 posts about all things technology related! Over 90% answered within 24 hours! Click here to start participating now! Also, be sure to check out the New User Guide.
Deleting Virus Infected File?
Name: ericcc Date: April 18, 2005 at 09:31:37 Pacific OS: w2k CPU/Ram: 400
Comment:
I ran my Norton Antivirus on w2k machine, and the system discovered a virus (w32.spybot.worm), Norton AV failed to delete it but only quarantined it. I want to manually delete this infected file myself, because after running the AV the system seems to be still infected, for example some words/charaters on web pages are so small that they are unreadable - which was not so before. But I'm afraid it could have a damaging effect to my system due to the directory path (c:\winnt\system32\svhost.exe) Will it be safe to delete this file?
Name: bofra Date: April 18, 2005 at 11:27:11 Pacific
Reply:
reboot in safe mode/vga mode, scan with anti virus in safe mode, check for w32.spybot.worm using regedit search for in: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\RunOnce HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\RunServices HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\RunServices HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\RunOnce HKEY_CURRENT_USER\Software\Microsoft\OLE check edit, c:\windows\win.ini edit with notepad,check for : run=%windir%\svchost.exe if present, delete line save and exit,
Summary: Having recently found my pc infested with the PE_JEFFO.A virus, *sigh*, i was told to start the pc in safe mode and delete the infected files, but wont this just delete the whole file as if safe mode ...
-1 
