Expert: Lorry - 6/15/2005

Question
-------------------------
Followup To
Question -
I have a virus called trojan.always up.  when norton tries to delete it, it can't because it is "open" or "in use" but when I go in safe mode it can't delete it because norton can't find it.

I seem to delete it but when I get back online it reinstalls and other stuff as well.

I have a PC running windows xp.
Answer -
Hi Susan,

I did a search on both on http://www.symantec.com/search/  and http://www.google.com/  for " trojan.always up", couldn't find anything. What exactly is the full name of the virus that Norton is finding?

Waiting for your answer,
Lorry

Lorry, I just did a google search of to trojan.alwaysup and a ton of stuff popped up.  Delete the space between "always" and "up"...

Answer
Hi Susan,

That made a difference, got two pages of results. Go to Windows Update and download the available updates.

removal instructions

The following instructions pertain to all current and recent Symantec antivirus products, including the Symantec AntiVirus and Norton AntiVirus product lines.

1. Disable System Restore (Windows Me/XP).

2. Update the virus definitions.

3. Run a full system scan and delete all the files detected as Trojan.Alwayup.

From: http://securityresponse.symantec.com/avcenter/venc/data/trojan.alwayup.html

Make sure you disable System Restore - very important.

Hope this helps!
Lorry