Comments on: How do I get rid of viruses Norton finds but cannot delete?

Question: How do I get rid of viruses Norton finds but cannot delete?

Samsonov14 — Sat, 10 Apr 2004 17:44:13 -0800

I can't get rid of some viruses on my computer. Norton can find them, but can't delete them. They're in my c:\RECYLER direcory. Little help? (More inside)

I can't find RECYCLER while in Windows, and although I can find it in DOS, I can't get a directory listing there. It tells me "volume (C:/RECYCLER) in serial drive has no label". Now everytime I reboot my computer, I get viagra sites in my bookmarks, and icons to go directly to those sites on my desktop. It's almost enough to make me stop visiting porn sites. Well, almost.

By: Gamecat

Gamecat — Sat, 10 Apr 2004 17:52:31 -0800

Empty your recycle bin maybe? The dir is marked as hidden, so it won't show up in explorer, but you can use the desktop icon to empty it. Unless of course something has messed with that as well, in which case I'm no help to you.

By: Samsonov14

Samsonov14 — Sat, 10 Apr 2004 18:24:34 -0800

I emptied the recycle bin, restarted the computer, and nothing changed. Also, my homepage in IE starts as "http://www.motor-search.info/". I'm running Norton again to see what it finds.

By: nelleish

nelleish — Sat, 10 Apr 2004 18:26:15 -0800

I had a problem similar to this just a few days ago, where Norton could find the infected files, but gave me a "cannot gain access to the file" error instead of deleting them. Norton's website told me I should restart the computer in Safe Mode and run the scan again. It worked for me, and the virus was deleted, so it's worth a try. Since I can't seem to find the particular page on the site again, here are the instructions, I ran through them again just now and they worked:

Go to Start Menu, click Run
Type "msconfig" into the run box
Click the BOOT.INI tab
Click the "/SAFEBOOT" box and then Apply, and then Close
It will tell you to restart the computer, do that.
When the computer restarts it will be in safe mode.
Run the Norton scan again, it should be able to delete the infected files it finds.
Run "msconfig" again, go back and unclick "/SAFEBOOT"
Allow it to restart again, and you should be back in normal mode and the virus should be gone.

Hope that helps!

By: Zonker

Zonker — Sat, 10 Apr 2004 20:10:38 -0800

You appear to have some nastywear called "CoolWebSearch" -- see this forum page for some tips on getting rid of it.

By: The God Complex

The God Complex — Sun, 11 Apr 2004 00:43:44 -0800

If you have the coolwebsearch (which i had) the cwshredder works wonders. It should be on the link Zonker listed above.

By: Samsonov14

Samsonov14 — Mon, 12 Apr 2004 22:36:14 -0800

Nice. Thanks for your help. CWShredder did the trick.