UNSOLVED

eagleman1952

updated

23 years ago

0

5995

February 14th, 2004 15:00

Virus detected

I am getting a message pop up that says;A virus was detected,but removed .It keeps coming up.Can anyone tell me why it keeps coming up?
  • alevasseur14

    2 Intern

    •

    593 Posts

    182

    0

    Posted February 14th, 2004 15:00

    I'm going to assume you are running either Windows XP or Windows ME.  If this is the case, the virus has more than likely copied itself into your system restore folder and respawns from there whenever it gets deleted.  It sounds like your virus software is picking it up, and this is good, but can be stopped.  Now the following are directions for shutting off System Restore in Windows XP, as that's the only computer I have available right now.  If you are using Windows ME, post back and I'll see what I can dig up.  From your desktop, right click My Computer.  Then go to properties.  Click on the System Restore tab in the window that comes up.  On that page, there will be a box with writing next to it that says, "Turn System Restore off for all drives".  Put a check in it and apply/OK your way out.  You're going to get a message that warns you about turning off System Restore and that you'll lose all restore points, click okay.  Restart and run your AV software again.  If your AV software tells you the name of the virus it's removing (it should be in the activity logs somewhere), you should go to www.symantec.com and download the removal tool for that particular virus, if they have one.  After that, you may even want to leave System Restore off for a while to see if the problem arises again.  Once you're satisfied that the virus is gone, simply reverse the steps I just gave you and turn System Restore back on.  Hope this helps you out!

  • volcano11

    2 Intern

    •

    27973 Posts

    182

    0

    Posted February 14th, 2004 15:00

    What is the name of the virus that is detected and which antivirus software are you running?

    Steve

  • 182

    0

    Posted February 14th, 2004 20:00

    The virus is swen.I had contacted microsoft earlier about what someone was sending me.They appeared to be from microsoft.They sent it with microsoft logo paper.It said to download an attached patch,which I did.That's when I started getting the messages.Anyway microsoft told me how to make sure everything was working.
  • gudgeon

    683 Posts

    182

    0

    Posted February 14th, 2004 20:00

    What you got wasn't from Microsoft (even though it purported to be) - it was spoofed link. Microsoft don't send out fixes to individual users like this. This should be a salutory lesson to all not to open any attachments or follow links in unsolicited mail.
  • alevasseur14

    2 Intern

    •

    593 Posts

    182

    0

    Posted February 14th, 2004 21:00

    http://securityresponse.symantec.com/avcenter/venc/data/w32.swen.a@mm.removal.tool.html

    That link will take you to Symantec's removal tool for Swen.  They still recommend that you turn off system restore so my previous directions still apply.

  • 182

    0

    Posted February 14th, 2004 21:00

    I know that now.Thanks for all the help that was given to me.I like this forum.All you have to do is ask for help in a problem,and people that know what their doing,answer from everywhere.  Thanks again