At 12:17 AM 6/9/2005, Chris Shaw typed:
After the virus scan finally came up clean, I have run MS Antispyware Beta
several times. It finds several spywares & removes them. I restart & the
error message continues. Each time I run the MS Antispyware it will always
come up with at least 4 or 5 & removes them. There is some spyware or
virus that is reinstalling itself each time I reboot I think.
Could be but more likely you have System Restore turned on & every time you
clean the infected windows files via AV the virus re-infects Windows from
the [drive]:\Windows\System32\DLLcache\ folder. See MSKB 310405 on how to
turn System Restore off. Even Symantec has a page on how to turn off & on
the System Restore because of virus infestations
<http://service1.symantec.com/SUPPORT/tsgeninfo.nsf/docid/2001111912274039?OpenDocument&src=sec_doc_nam>.
When you come across a particular bug make sure you write down it's name &
then go to the Symantec site & find it as they may have a tool to remove
that particular nasty. If not they'll most times have instructions on how
to remove it manually. Many of these instructions will tell you to turn off
System Restore.
OBTW the MS Antispyware is a beta & it's primary purpose is to keep you
from getting infected in the first place so if you are infected it's
probably something that it doesn't cover.
And this is causing Explorer to keep closing & restarting. But I don't
know how to find it & eliminate it.
You don't mention which AV app that you have & you don't mention if you're
running the latest anti virus definitions.
Is there some way to reinstall Windows Explorer??
You aren't there yet & reinstalling Windows if the system is infected will
do you no good.
I'd make sure that I had the latest definition files & that I scanned every
file on the system then I would try another AV app w/ it's latest
definitions. There are several freeware ones out there, just Google for them.
Sometimes all tho rarely you'll not be able to get the system sufficiently
clean & a reformat & a reinstall of XP is required.
Good Luck.
----------+----------
Wayne D. Johnson
Ashland, OH, USA 44805
<http://www.wavijo.com>
--
----------------------------------------
The WIN-HOME list is hosted on a Windows 2000(TM) machine running L-Soft
international's LISTSERV(R) software. To unsubscribe, write to
[EMAIL PROTECTED] If you have questions
about the list, write to [EMAIL PROTECTED]
