Help- Norton is unable to delete this virus!

[freemurti]

I am running windows XP Prof. SP2 with Norton Antivirus 2004. A virus has been detected by it but it is not able to remove.
The details is as follows-

It is at C\ Windows\csrss.exe
The virus is Bloodhound W 32. EP
Norton message is - unable to repair/delete the virus.

When I try to quarantine, it does that but finally says a virus is still there.

I tried windows task manager & tried to stop csrss.exe from running processes- but the message says - it is a very important & cannot be stopped.

I tried in the safe mode also to delete the virus by running NAV- but same result.

I have switched off system restore also, but of no benefit.

Please help to overcome the problem.

Thanks.

 

[anandk]

The csrss.exe which is from Microsoft is located in the c:\windows\System32 folder. u havebeen infected with a virus; and lets face it, a virus can take any name to fool u.

this particular one, is a nasty worm; and is also difficult to kill thru task manager. norton fails to delete this. nothing new though, norton just identifies, and expects us to do the dirty deletion job !

what i recommend in this case, is that u download 'deletedoctor' from
*www.diskcleaners.com/
and use it to delete tha nasty basxxxd. this utility will fix its claws on the worm, and delete it on reboot !

for gen info check *www.auditmypc.com/process/csrss.asp

have fun !

 

[JGuru]

This Virus can't be removed from Windows so install
Mandrake Linux 9.1 and have dual OS.
Load Mandrake Linux and access the Windows files
using 'konqueror'
Your C : drive can be accessed as '/mnt/win_c'
and similarly D: drive ->'/mnt/win_d'
Use KFinder in the menu and delete the file.
Load Windows now. The Worm or Virus won't be there!!
It works like magic!!
I've removed some viruses in Windows this way!! :roll: :roll:

 

[swatkat]

Download WinPFind.

Usage Instructions: Download WinPFind.zip and extract it to your C:\ folder. This will create a folder called WinPFind in the C:\ folder. Inside c:\WinPFind is a file called WinPFind.exe. Double-click on this file to launch the program. Once it is launched, click on the Start Scan button and wait for it to finish. This program will scan large amounts of files on your computer for known patterns so please be patient while it works as it can take a while, upwards to 30 minutes or more.
When it is done, it will show the results of the scan. Click on the Copy to Clipboard button and then paste the contents of the log in your clipboard as a reply to where you are receiving help.

Paste the log here. Do NOT delete any files.

 

[sakumar79]

Since you have NAV2004, try to follow removal instructions found at *securityresponse.symantec.com/avcenter/venc/data/w95.cih.1049.html

Once you are sure virus is gone, remember to run a scan once more (preferably with a second AV) and then remove all system restore points and create a new one...


Arun