killing killAV

October 20, 2005 5:35 PM

Killav-L: This virus has infected a not-so-web-savvy friend's computer (at least I'm pretty sure that's the one). It's knocked out his antivirus (Norton) as it's designed to and I just can't find much out there as far as a fix. Anyone have a good suggestion?

Oh, and it's a WinXP SP2 Pro, and the poor guy is running Juno. Another question would be where he got this from... email, more than likely? Thanks in advance gang.

posted by moonbird to computers & internet (4 comments total)

Housecall
posted by angry modem at 5:46 PM on October 20, 2005

More than likely and email attachment virus. He clicked on it and ran whatever executable there was to run, for whatever trumped-up reason that it supplied.

If you're not local to him, and can't fix it yourself, then I would suggest something like Housecall or Geek Squad. They both come to your door and take care of things like this.

However, if I were the person charged with fixing it, and it had already knocked out Anti-Virus, it would be difficult to suggest anything but a cut and burn strategy (i.e. reinstall the operating system, possibly with a backup and format first).
posted by thanotopsis at 6:17 PM on October 20, 2005

Whenever I get hit, I go here.
posted by JPowers at 6:44 PM on October 20, 2005

Moonbird, unless you've somehow got a positive ID on the virus, I would not jump to conclusions about it based on that one symptom: Scores of viruses will terminate all major commercial AV processes.
There are some steps that can be taken to eliminate whatever the offending malware is, but unless you are a tech support professional (or reasonably accomplished amateur) your options are likely limited to TrendMicro's Housecall; and if that doesn't work, go with a pro. NOT Geek Squad; they are as much a sales force as they are a fixit service, and they are really overpriced. You should be able to find a reasonably-priced local independent operator in the want-ads of your paper. Call and ask for references, if you have that kind of time.
The wipe-and-reinstall will almost always work, but that can be such a hassle for the client, I always like to try to eliminate the offender surgically first.
Full disclosure - I operate a small Tech-support business which is more or less in competition with Best Buy's Geek Squad.
posted by BigLankyBastard at 12:35 PM on October 21, 2005