Expert: Lorry - 5/14/2008

Question
Dear sir
My pc is effected with at peculiar virus which activates at the time of pc boot up and is continously refreshing the desktop.Location If is run msconfig from Run menu then its shows C:\WINDOWS\SafeMass.exe, another location is
SOFTWARE\Microsoft\Windows\Current Version\Run . I cannot remove the virus from the system. Which antivirus can work i dont understand. It doesnt even allow to remove the pendrive.
another location is

Answer
Hi Rumman,

If you have an anti-virus program installed, start Windows in Safe Mode and then run a virus scan.

Otherwise, using Internet Explorer, go to:

http://security.symantec.com/sscv6/default.asp?langid=ie&venid=sym

Click the GO button, then under Virus Detection, click Start. You might be told that you need to download and install ActiveX Controls for the scan to work, answer Yes.

Write down exactly anything it finds, then go to: http://www.symantec.com/search/  and do a search for what was found. Symantec usually has a removal tool and/or directions for removing manually. Make sure that you follow the instructions for removal, step by step, especially the part regarding disabling System Restore.

Download Spybot - Search & Destroy 1.5.2 from:

http://www.download.com/Spybot-Search-Destroy/3000-8022_4-10122137.html

Check for updates before running a scan.

Hope this helps!
Lorry