My son's computer got a similar virus one time and I found the main virus files at the root of my system drive. If you can boot into DOS mode, go to that drive and look for any files that have been added recently. Often they'll be put in the System32 directory as well. In DOS mode you'll be able to delete or simply rename them if you don't trust yourself.
It's generally a registry entry that calls one of these files and starts the virus. If the registry entry can't find the file you should be able to boot and get your a/v stuff working.
Your worst fear is it's some kind of rootkit entry. I think there's a guy in China though that's created a rootkit destroyer and I think it runs from a floppy or CD.
Good luck.
Art
Geek Speak » in reply to A special place in Hell for Anti-virus Virus writers
re: A special place in Hell for Anti-virus Virus writers
The whole thread (16 posts)
- A special place in Hell for Anti-virus Virus writers
- Might be time to re-partition and reformat \the HD.
- re: A special place in Hell for Anti-virus Virus writers
- Try restarting in DOS mode w/CD support.
- Interesting BBC article on computer security, including how Vista will do it.
- Agnitum Outpost Firewall
- Any clues as to how she got it?
- The IT department? (n/t)
