Really Need help

[drummond]

I am running Windows XP and when I try to go to the Run>command to release /renew the window disapears after a second or so and the same with the norton live update window, someone said i have a virus possible " yaha" or " nachi" when, I downloaded the Removal tool from norton and put it on the desktop,the instructions say I should run in safe mode but when I go to safe mode I cant see the Romoval tool. any help would be greatly appreciated.Thank you................John

 

[ChrisHirst]

Any command window you open from the run dialog will close when the command requested has finished executing. To keep a command window open type "cmd" (no quotes) into the run box.



Chris.

Indifference will be the downfall of mankind, but who cares?

 

[drummond]

Thank you Chris, makes a person wonder why the guy from the service provider support would get me going by telling me I have a virus.
Any ideas why when I install norton anti-virus the Live update window closes just as fast.
Again thanks for help..................John

 

[ChrisHirst]

Sounds like you use AOL!

I don't use Nortons at all so can't be definite, it maybe that it is just initialising a process or it can't find what it is trying to connect to and you are not seeing any errors.
Try opening a command window first then running the update from inside that, it may be you see an error message then. Also check the system event logs and any logs that Nortons creates.



Chris.

Indifference will be the downfall of mankind, but who cares?

 

[jrbarnett]

Many viruses will attempt to stop antivirus software updating themselves to evade removal.
Go into task manager (right click the task bar) and terminate any dodgy processes, then try and run Norton.

If it is Yaha, here is what to do:

http://securityresponse.symantec.com/avcenter/venc/data/w32.yaha.e@mm.html

And the same for Nachi:

http://support.microsoft.com/default.aspx?kbid=826234

Note: McAfee stinger is a free scanner that will pick up both of these viruses, you may want to try it:

http://vil.nai.com/vil/stinger/

One quick point though: because you are running Windows XP, you must disable system restore before starting the removal process or Windows will just restore the virus afterwards, throwing all of your hard work out of the window.

John

 

[drummond]

Thanks a million for the help guys.john I ran stinger and it found 173 infected files and 2 trojans now my norton stays open.Most of the viruses were "W32/bagle.j@MM"
Again thanks...................John

 

[jrbarnett]

I forgot to mention that system restore should be reactivated after the virus scan/cleaning as it does perform a useful function.

John