I have windows xp and norton system works 2004. I got a worm in the system. Norton was slow to get it. It spred through my system. I believe I got rid of the worm but now cannot access secure websites. I was told by my DSL provider that I still have parts of the worm left. How do I fix it? I have ran antivirus in safe mode and nothing can up. I have done alot of looking and fixing in safe mode because that is where my computer is working best right now. any thoughts?
I have changed all settings back to default in internet explore. NIS? not sure what that is? If it deals with norton. I have disabled norton to see if it makes a change. The funning thing is I can get on to Yahoo secure websites but no others. I have spent hours going through my system checking different things. defrag., win doctor, avast virus scan, disable norton, disable firewall, change IE setting to default, updating norton, looking for windows updates, reinstall IE. When accessing windows updates I rec. an error message the first time. I rebooted and then was able to access that web site. I have over 120 gig of hard drive. the scans take forever. I partioned the hard drives off. Can I reinstall Windows XP and just change that partion, or will it reformat the whole drive. I am close to that point.
As soon as everything is working like it should, you can create a image of the drive with Norton Ghost. That way you will be able to restore a entire system, including applications, settings etc with 10 - 20 minutes.
Avast has hit files that can not be scanned. The virus hit D drive not C drive, C drive is where windows is. I know this was not a smart move but, I have gotten viruses before and Norton has taken care of them. I never thought that much of it. So I didn’t pay attention to the name of the virus. What happenes if I install a different browser? I tried MSN browser, that didn’t work because of the loggon. To image a drive do you have to plug in a spare hard drive and unplug it and take it off the system to prevent infection after the imaging? The Virus spred quick, Norton notifed me it was in 7 files before it was contained. Would anyone suggest a good browser? I believe the virus is gone but damaged files. But I am guessing. I have put alot of time into trying to find and fix the problem.
get an IMAGE-Program(Ghost/Symantec, PartitionImage/Powerquest, TrueImage/Acronis …)
which saves an exact copy of C: drive to CD’s or to a file on D: drive…
in case of diffcult problems, you can restorew your system&programs including settings etc without losing data
could be that the virus damaged(modified your host-file, and thus some sites are blocked…
follow instructions in my 1st posting, or copy the contents of your host file(s) (filesearch with WinExplorer
I tried installing Opera and it could not connect. What a pain in the ***. Maybe it is time to pull out the windows cd. I run some more scans. One come up with 3 errors. I have not been home scince the scan was complete. I will keep you informed on what scan and if it fixes it.
Since Opera also couldn’t connect, at least we now know it is not a browser issue. Still, there are a lot os options that can cause this. I suggest to remove and reinstall Norton Systemworks to make sure it isn’t that either. In some occasions viruses damage/changes your winsock. This little util will restore the winsock settings > http://www.cexx.org/lspfix.htm
I would say, give it a try.
The Worm I got was Ronoper Worm. I am still fighting it. I still can not get on secure web sites. It looks like Norton caught and removed some of it but not all of it. The computer is still infected. At least now I can look up the worm and finish the job. By the way Escan found the Worm but can not get rid of it. Thank you all, The links you gave where helpfull. I will keep you informed. That is one worm I have not heard of but it is the worst I believe it took down most of computer and 2 days of work, I can see the light at the end of the tunnel now. Thank you Again.
I followed norton’s site to repair it. It did not work. I reinstalled windows xp over the Orginal one. That did not work. I called Windows Virus # 866 PC SAFETY. They could not help me. My computer still won’t access secure website except Yahoo. I called windows 800 936 5700. I got ahold of some one over seas. It was hard to understand him. He had check the register but that did not work. No matter what I tell them they want to check internet options.
Why not ? what did not work ?? did you not find the files/registry entries mentioned on Symantec’s link, or couldn’t you delete them ?
Pleaser give more details…
Also post a hijackthis-Log, and post the contents of your host file here…