Expert: Lorry - 4/24/2011

Question
Hello,
I have this XP Security alert virus that seems like it won't go away even after SuperAntiSpyware deletes it. The first time I got it, it seems as if it has deleted all my programs or are hiding them. For instance when I go to Start and click on my programs all I have is Mozilla and SuperAntiSpyware nothing else. I even had to re-download Mozilla. And I can't download Malwarebytes I don't know why. So my first question is did the virus really delete my programs or are they hidden somewhere, but I did watch a video with Windows Media Player and didn't have to download that again so I'm thinking my programs maybe hidden, but I'm not sure? Also My Windows Security Alerts keeps saying I have automatic updates turned off, but when I go to the Control Panel they are on. Any help and suggestions would be greatly appreciated.

Answer
Hi Rod,

Using Internet Explorer, go to:

http://security.symantec.com/sscv6/WelcomePage.asp

Click on Continue to Symantec Security Check. Under Virus Detection, click Start, accept the End-User Agreement. It will ask you a few times to permission to install Active X Controls, answer yes. Once you see that the program is actually scanning, leave the computer alone until the scan is finished.

Once the scan is done, write down exactly anything it finds, then go to:

http://www.symantec.com/search/  

and do a search for what was found. Symantec usually has a removal tool and/or directions for removing manually. Make sure that you follow the instructions for removal, step by step, especially the part regarding disabling System Restore.

I would also suggest downloading Malwarebytes Anti-Malware  from:

http://download.cnet.com/Malwarebytes-Anti-Malware/3000-8022_4-10804572.html?tag...

Check for updates after downloading Malwarebytes before running a scan.

The important thing is to disable System Restore before removing the threat, otherwise it will be back the next time you start Windows.

Hope this helps!
Lorry