Help - Search - Members - Calendar
Full Version: Virus(access Denied)
BleepingComputer.com > Security > AntiVirus, Firewall and Privacy Products and Protection Methods
   
Ponkadeedle
Hi.Norton Antivirus has detected a Virus but is unable to get rid of it(What do we pay our money for?)
It gives the name of the Virus and the name of the Object(Whatever that is)
It then says "Access Denied"
Is there some way of sorting these things out manually as an easy to follow step by step process?
Thanks.




Moved to a more apropriate forum ~acklan~
Albert Frankenstein
What is the name of the virus, and what other information has Norton given to you regarding this?

Sometimes it is difficult to remove a program (which is what a virus actually is) if it is running. So, one trick for successful removal is to boot your computer into Safe mode and run Norton and try to remove it while in Safe mode.

Reboot your computer hitting the F8 key once a second. Choose 'Safe Mode' from a list of options when prompted.
just me
Ponkadeedle:

To elaborate a little on what Albert Frankenstein said:

Go to Symantec Search and look up the virus that they identified. Often there are specific instructions to get rid of viruses that are difficult to remove.
Elendil
QUOTE(just me @ Jul 6 2006, 09:52 AM) *
Ponkadeedle:

To elaborate a little on what Albert Frankenstein said:

Go to Symantec Search and look up the virus that they identified. Often there are specific instructions to get rid of viruses that are difficult to remove.


Trust me on this one... you don't want to do manual removal unless you have to (Symantec's manual removal processes tend to be rather long and painful), in which case it is always handy to have Killbox so you don't have to do the searching yourself, but that's another story. Albert is right, use safe mode with Norton to attack the baddy. If that doesn't work, then manual removal might be mandatory.
Ponkadeedle
Hi.Thanks for the info.The trouble is Norton won't open in safe mode.(Norton Integrator has encountered a problem).Also the whole screen is moved to the left by about five centimetres.If you drag it to the right the right side vanishes into the black margin.Virus name-W32.IRCBot. Object name-C:\WINDOWS\System32\WNXLIB.DLL.Thanks.
Elendil
Hmmm.... that's interesting and odd. Norton should be able to run in safe mode with ease. Maybe you should try running Ewido AntiSpyware (if you're running a Windows 2k or Windows XP operating system):

Please download Ewido anti-spyware 4; it is a 30 day trial version of the program.
  • Install ewido security suite
  • Ewido will automatically run at the end.
  • The program will now open to the main screen.
  • When you run ewido for the first time, you may get a warning "Database could not be found!". Click OK. We will fix this in a moment.
  • You will need to update ewido to the latest definition files.
    • On the top row of the main screen click update.
    • Then click on "Start Update".
  • The update will start and a progress bar will show the updates being installed.
    (the status bar at the top will display ("Update successful")
If you are having problems with the updater, you can use this link to manually update ewido.
ewido manual updates
Don't run it yet.

Reboot into SAFE MODE
By pressing the F8 key right when Windows starts, usually right after you hear your computer
beep when you reboot it (some versions of windows will display 'Starting Windows' with a grey progress bar)
you will be brought to a menu where you can choose to boot into safe mode.

Open Ewido anti-malware
Click on the scanner button in the top row.
  • Click Complete System Scan and the scan will begin.
  • During the scan it will prompt you to clean files, click OK
  • When the scan is finished, look at the bottom left of the screen and click the "Save Scan Report" button.
  • Click on "Save Report As".
  • Save the report to your desktop
Close Ewido

Please reboot back to normal mode and then post the ewido log you previously save to your desktop in a reply here. I'll check to see if it removed the Trojan (or any other malware for that matter). If it's removed the Trojan, then hurray! the troubles are gone; if not, well then we'll have to proceed to a longer cleaning method.
This is a "lo-fi" version of our main content. To view the full version with more information, formatting and images, please click here.
Invision Power Board © 2001-2009 Invision Power Services, Inc.