Cannot delete a quarantined virus 1

[codnchips]

Hi,

A client machine tells me that it found the following:

"Six buttons from hell.izs" "Js.Trojan.WindowBomb"

On the server, when I select the PC the virus was found on, and look at the virus history, I see multiple entries of the same virus and the last entry in the list says "Quarantined".

When I right-click the last entry in the list to "Delete Permantly (or clean) it tells me that the operation failed, but provides no further information i.e. Why!!!

The file referenced is not on the PC that was found.

Any ideas where to start would be greatly appreciated.

Thanks
Stuart

 

[mattjurado]

Have you gone to the client machine to check it out/delete it?

Matt J.

 

[codnchips]

Yes, have been to the client machine and attempted to delete the file, but the same behaviour occurs. :0(

 

[SESaskDFC]

Howdy:

What os is the client machine running?? If it is WinME or XP, then disable System Restore, run a full system scan, reboot, run another full system scan and then re-enable System Restore.

Murray

 

[codnchips]

Hi Murray,
Thanks for your suggestion. Unfortunately, the OS is question is W2K Prof.

Cheers
Stuart

 

[mattjurado]

I wouldn't worry too much if its just stuck in quarantine, but I don't like to leave any trace of viruses on systems. Perhaps boot to safe mode? Try removing it from quarantine there, or navigating to the quarantine folder in explorer, and delete anything there.

Matt J.

 

[darksasami]

While you can right-click the first entry in the Virus History and tell it to delete, the last last entry isn't associated with a file. The reason that there's more than one entry in the Virus History is the same problem some others are seeing:

http://service1.symantec.com/SUPPOR...032714423348?Open&src=&docid=2000012612185448

Most likely this explains the behavior you're seeing.