Viruses etc.

[distortion]

i couldn't think where else to ask for help, but i have this virus thing:

download.trojan

according to Norton i've had this before, and it got automatically deleted. this time though, it seems i can't delete it. i try to using Norton and it just says 'delete failed'. i heard this trojan searches for, and downloads, other trojans. so could download one which f**ks up my computer again.

Source: eied_s7_c_7.exe
Description: The compressed file eied_s7_c_7.exe
within c:\eied_s7.cab is infected with the
Download.Trojan virus.

does anyone know how i can get rid of it?

[static anonymity]

Erm, you know I'm sh*te with computers, but I know I've had one trojan before and as far as I remember my dad (my pooter's hero) stuck it in the virus vault and we've never had any problems since. So if you have one, you could try that. At least until you can get rid of it. That way it shouldn't feck up your pooter more.

We also looked on the Microsoft website, I think, and our antivirus site, so try having a nosey over at Norton, or emailing them about it asking for any help?

That's the best I can do, sorreh.

[distortion]

it won't let me quarantine it, thats one of the problems...

i'll check those websites.

[Martin]

It's probably failing to delete because it's running.

Try deleting the file in Safe Mode. To get to safe mode, reboot your computer and keep tapping F7 before it loads. Then when the menu comes up, use your arrow keys to select Safe Mode. It will boot up similarly to normal, then a (large) desktop will appear. Navigate to Norton and try and remove it again.

[distortion]

would i be able to do a full scan with Norton when its in safe mode? cos wouldn't that work better? and get other things too?

[Martin]

Well yeah that's what I meant...

[Martin]

Incidentally, if you have any problems running Norton in safe-mode...

While in safe-mode go to Start> Run and type "navw32 /L" (including the space, but not including the speech marks)

[distortion]

thanks alot dude

[Martin]

No problem.

Just as a sort of ...anecdote.. I don't actually understand the purpose of that file eied_s7.cab
A cab (cabinet) file is just a collection of compressed files in one location, but this one doesn't seem to be part of the XP required components... in fact it doesn't seem to be part of the operating system whatsoever, so I'm a bit confused as to where it came from. I'm thinking it's a prime target for adware and viruses anyway... I'll try and find out the source of what attacked that file because it's probably that it's still hidden away somewhere in your 'puta. Although NAV seems to be keeping it at bay.

[distortion]

ok, so i tried it in safe mode and it still won't delete/quarantine it. there's now 2 of them too..

[Martin]

Hehe. Pesky viruses.

Well, I found these instructions so it *should* remove it. Sort of strange if it doesn't..


The following instructions pertain to all current and recent Symantec antivirus products, including the Symantec AntiVirus and Norton AntiVirus product lines.

1. Disable System Restore (Windows Me/XP).
2. Update the virus definitions.
3. Restart the computer in Safe mode (Windows 95/98/Me/2000/XP) or VGA mode (Windows NT).
4. Run a full system scan and delete all the files detected as Download.Trojan.
5. Clear Internet Explorer History and files, if needed.

[distortion]

i'll try that tomorrow, i'm too tired now.

[Martin]

I know the feeling.

However, I have it on good authority that this tool >>here<< should remove all the infections.

[distortion]

martin said:

However, I have it on good authority that this tool >>here<< should remove all the infections.

it didn't

[Martin]

Are you sure your virus definitions for Norton are fully up to date?