av dos

[MargeB]

Does Norton Antivirus have a DOS mode that it moves into for stubborn virii?

I've got svchost (sp) and NAV keeps trying to delete it this way, but never succeeds. Any tips? Getting worried now.

[j2buttonsw]

NAV is a bootable CD and you should be able to scan the PC by booting from it. The problem is that it scans using the original virus definition file which may be out of date.

[headrush]

Just a thought but you could try the following:

1. Run MSConfig (Start - Run - and type MSCONFIG)

2. Click on the Startup tab and untick the offending program. Leave the others unless they are causing problems and click OK.

3. Restart and try removing with NAV. If this doesn't work, will it run in safe mode? To start Windows in safe mode, select it before Windows starts (when the list of Windows versions is displayed briefly)

If you know the name of the virus, you can look here: http://securityresponse.symantec.com/avcenter/vinfodb.ht ml for removal instructions.

Good luck...

[MargeB]

Thanks a lot. I have never seen anything like this before. I spend about 30 mins each day in msconfig, and have just worked out that it is one specific program that keeps renaming itself and resinserting itself into the startup items: from avirus to timer and back, in loads of different places.

The AV program can't pick it up (even updated). Its pretty worrying, since I think its a phishing trojan.