Hi, this may not be the right thread for this, but I'm not sure where else to post. I hope someone can help me out.
My parents' computer has been hit with a virus or worm and I can't determine which one it is so I can clean it. My mom got the virus warning from NAV and instead of cleaning etc she shut the comp down (!. So, now it's infected with something. The problem is-NAV 2004 doesn't find anything after I scan so I don't know what virus it is. I've also done a Panda search and it found 4 infected files in the email storage folders-these have been cleaned out. But the problem still occurs.
Symptoms are: NAV auto protect is disabled and can't enable it, can't connect to NAV Live Update, can't access certain websites (symantec.com etc)
When the computer is rebooted, a DOS window opens up (path leads to System32 folder) which I guess is the worm or virus starting itself up. Also, there are about 10 .exe files in the C:/ directory, all with weird names like xdcsskyt.exe
I went to Symantec site on my computer and everything they have written suggests this worm is from the W32.Gaobot family but when I check the registry keys that are supposed to be affected, the files that are supposed to be added to the keys aren't there. Also, Symantec says that a manual scan with the latest definitions should find the worm files but any scan I do comes back clean.
So, now I don't know what to do-has someone had this problem or does anyone have any idea how to identify what virus this actually is so I can start cleaning it properly.
Sorry for the long post but this has me scratching my head. Thanks kindly for any help you can give. Cheers
Bookmarks