Virus problem 1

[shaner66]

I just reinstalled XP Pro, first thing I did was reinstall Norton Antivirus and my firewall. I then setup everything else.

Shrtly after Norton Antivirus started giving me the message that the file "C:\Windows\System32\dllhost.exe" is infected with the "W32.Welchia.Worm" virus. It says it is unable to repair the file and it also says "access to the file was denies."

My only option is to click ok, but that's a never ending cycle. As soon as I click ok, the message pops right back up.

So I deleted the dllhost.exe file, but it immediately put itself right back in the System32 folder.

What should I do?

 

[carrr]

Turn off System Restore before you try and clean the machine:

http://service1.symantec.com/SUPPORT/tsgeninfo.nsf/docid/2001111912274039

 

[Turkbear]

Hi,
Check the Norton and WindowsXP sites for any info on removing infected files on XP systems - since it is a system file, XP will restore it from the Repair section, I believe - you may have todelete it from there as well and replace it with an uninfected copy.

 

[shaner66]

carr - Yeah, system restore was my problem.

I was running the removal tool for that virus, but I didn't disable system restore (I usually have it disabled, but I just formatted and reinstalled).

I disabled system restore and it cleaned it with no problems.

Thanks a lot!