Virus Scan Software Problem

[arynn]

I am currently using AVG as my virus scan program and it has been working well.

I have been getting pop up messages from the "AVG Resident Shield" stating that there is a virus identified as VBS/LoveLetter.AS@mm and it is found in the file

E:\System Volume Information\_restore{6A4B977B-B16C-4398-8067-5

It then says to run AVG to remove the virus.

When I run AVG, it doesn't find the virus. I also can't find the directory when I search for it.

Any ideas how to get rid of this virus?

Thanks.

 

[JonathanB]

Have you gone to My Computer>View>Options>Show all files? Perhaps the file is hidden. Another way is to try a free Online Virus Scan

 

[arynn]

Thanks for the suggestions. I do have the hidden files visible.

I tried the online virus scan, but it didn't pick up the virus.

What I find confusing is that the AVG resident shield knows the virus is there, but when I run the AVG virus scan it doesn't find it.

 

[terminalmind]

You might try contacting Grisoft customer service Grisoft
What operating system are you using?

 

[dakata24]

it's not shown in the AVG Virus Vault?

load up AVG, --> Program --> Virus Vault


also make sure in the Service --> Complete Test Settings that you have "Test all extensions" checkmarked to do a thorough scan.

 

[arynn]

Thanks for the suggestions.

I am running Windows XP.

The virus wasn't showing up in my virus vault. However, I did not have the "test all extensions" box checked.

I'm going to rerun the complete test now to see if that works.

Thanks.

 

[arynn]

AVG still did not find the virus during the complete scan and I keep getting message boxes stating that the AVG Resident Shield found a virus.

Any other ideas, or am I going to have to reformat?

Thanks.

 

[JonathanB]

You are supposed to make an AVG Rescue Disk during install. Run it!

 

[Mem]

How to create the AVG Rescue Disk

Go to the System Menuand choose the Create Rescue Disk option. As the first step, the AVG system will check if the system areas you are going to save are virus-free.

If a virus is detected, the program will display a warning message. In this case we recommend that you do not continue. Instead, restart the operating system from a virus-free system diskette and your previously created AVG Rescue Disk (if you have one). However, you can continue if you do not already have an AVG Rescue Disk. Note that in this case no backup copy of system areas will be stored (because they are useless because of virus), just the AVG-SOS program will be stored to the disk

In the second step you can enter a name for the backup file, its location and a description of it. We recommend you use a standard name, save it to diskette and add a description especially if you will have more than one backup to recognize from which computer which files came.

Of course, you can save backup files to your hard disk, too. But note that in case of computer damage this file may not be accessible.

Fill in all fields and press the Create Rescue Disk button. We assume you will use a diskette for this purpose. If there is enough space on the disk, the backup file will be created and the AVG-SOS program will be stored there. Please save this diskette and a safe place for possible later use in emergency.

Also note,

When to use AVG SOS

Use this program, if:

· your computer is infected by virus, this virus is active, has control over operating system, and can not be removed in the usual way, or

· system areas are infected or damaged and operating system can not be started from hard drive, as usual.

You can not work with your computer in the normal way. You must restart your operating system from a virus-free Bootable diskette . It will start the MS-DOS operating system only, not Windows. This is why AVG SOS is a MS-DOS application.

How to run AVG SOS

If AVG SOS is stored directly on a Bootable diskette and AUTOEXEC.BAT was modified, AVG SOS will start automatically.

In the other case, start the operating system with the bootable diskette, then replace the DOS diskette with the AVG SOS diskette and run the program by entering this command followed by the Enter key:

AVG.EXE

 

[arynn]

Mem,

Thanks for the info. I made an AVG Rescue Disk. However, I was unable to boot to it and I don't have a Windows Start Up disk (I'm not sure how to make one for XP - or even sure if there is one).

The virus I have doesn't seem to have too much of an effect on my system other than the annoying message boxes from the AVG resident shield, so am I supposed to run the AVG rescue disk? Or is that just for when you can't get into Windows (that's what it sounds like to me)?

Thanks.

 

[JonathanB]

It will not harm running the Rescue Disk. I run it occasionally in my PC, though I use Norton Rescue Disk and PC-Cillin 2002 as my resident AV. Also, did you ticked HEAL when the AVG resident notice pops-up?

 

[Mem]

If you`re sure you`ve the virus then you can try the info here in this llink ,

Unfortunately after the virus has struck there's not much that can be done to retrieve the destroyed data except to reload the destroyed files from a backup. However, after updating your anti-virus program or buying one, then follow these steps to correct the registry and get your computer working again.

Using the REGEDIT program, remove the following keys from your Windows registry.

HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion
\Run\ MSKernel32=C:\WINDOWS\SYSTEM\MSKernel32.vbs

HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion
\RunServices\ Win32DLL=C:\WINDOWS\Win32DLL.vbs

I should point out there`re many different forms of the loveletter virus going round.

You can also try Norton online virus scan
here .