Wikiposts
Search
Computer/Internet Issues & Troubleshooting Anyone with questions about the terribly complex world of computers or the internet should try here. NOT FOR REPORTING ISSUES WITH PPRuNe FORUMS! Please use the subforum "PPRuNe Problems or Queries."

Virus Fails to remove

Thread Tools
 
Search this Thread
 
Old 5th Dec 2008, 13:41
  #1 (permalink)  
Thread Starter
 
Join Date: Oct 2000
Posts: 259
Received 0 Likes on 0 Posts
Virus Fails to remove

Folks

I use Norton, which recently advised I had trojan.Brisv.A!inf. I downloaded the romoval tool, but upon re-running Norton it says I still have the virus. Ran the process again, but still the same outcome.

Would any of you computer experts have any idesa?

Thanks

G
gehenna is offline  
Old 5th Dec 2008, 14:27
  #2 (permalink)  
More bang for your buck
 
Join Date: Nov 2005
Location: land of the clanger
Age: 82
Posts: 3,512
Likes: 0
Received 0 Likes on 0 Posts
Try re-starting the PC in safe mode and re-run the removal tool.
green granite is offline  
Old 5th Dec 2008, 16:56
  #3 (permalink)  
 
Join Date: Apr 2008
Location: November18
Age: 48
Posts: 258
Likes: 0
Received 0 Likes on 0 Posts
What is in your startup items on msconfig? Services running etc?

Can you identify where it is stored?

I recommend winpatrol for keeping an eye on those areas as most viruses/malware are said to be manifested there.

I am not an expert though! I am still learning from my own mistakes
x213a is offline  
Old 5th Dec 2008, 23:00
  #4 (permalink)  
 
Join Date: Dec 2005
Location: Wellington,NZ
Age: 66
Posts: 1,679
Received 10 Likes on 4 Posts
Not a lot of tech info at the Symantec site about this one. I did find some success stories.
They involve disabling system restore (turn it off), restarting in safe mode, run the removal tool again, check the registry and remove the following key (if present) HKEY_CURRENT_USER\Software\Microsoft\PIMSRV
Restart in normal mode, run a virus scan, enable system restore again.

I'd try green granite's simpler version first, and if that fails to remove it, try the steps above.
An additional tool that may be effective (it's extremely good) is MBAM. This is an anti-malware scanner. Install it, update it, then run a scan.

PS, apparently it converts any media files in .mp2 or mp3 format to .wma format, increases their size by 1138 bytes, then causes the media player to link to a malicious link if those files are played. Worst case scenario, you may have to loose some of those files.

It was possibly contracted by allowing/instructing the media player to download "required" codecs. Ring a bell?
Tarq57 is offline  
Old 6th Dec 2008, 05:04
  #5 (permalink)  
Thread Starter
 
Join Date: Oct 2000
Posts: 259
Received 0 Likes on 0 Posts
Thanks Folks

Thanks so much for your advice; am away for a couple of days, but will come back if I need your further good ideas, and reply to questions you posed.

G
gehenna is offline  

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is Off
Trackbacks are Off
Pingbacks are Off
Refbacks are Off



Contact Us - Archive - Advertising - Cookie Policy - Privacy Statement - Terms of Service

Copyright © 2024 MH Sub I, LLC dba Internet Brands. All rights reserved. Use of this site indicates your consent to the Terms of Use.