virus's keep coming up

Have a client who are on a 3 node network using Wingate on Windows 98. Client has a firewall and norton 2002 antivirus.

Problem: A few weeks ago client received message from Housecall saying she was infected by w32.opaserv and w32.funlove.4099. Went through eradication process updated Norton and reran scan. No virus's found in either Norton or Housecall. Yet Norton keeps displaying that the virus's have still there.

Did eradication process on all 3 machine individually ( not connected to network ).

Dont find anything on the web as to why they should keep displaying. Does anyone have an idea ?????????

Thanks.

 

Not a clue. So, for grins and giggles......did you try using the fixtools for them?

Daizy

 

Have you applied the relevant security patches?

 

Didnt use the tools did a manual removal. Will try the tools.

All patches for I.E. have been installed.

Doesnt make sense to me either. Some sort of Phantom but not sure where its coming from. Both Norton and Housecall say nothing is there. Nothing new on system except for UPS software.

Have had a lot of these virus's on clients machines lately but have been successful in removing them but this one has me stumped.

Thanks.

 

Down near the bottom of this they make mention of your problem and a possible way to clean it out by using Safe Mode. Pardon me if you have already been there/done that.



ps, The other critter is also equally hard to get rid of according to this. You have my deepest sympathy, I think you have a challenge ahead of you. If you have some good current backup images it might be a good time to use them.

 

I really do appreciate all the responses but have done all that has been mentioned before. Thats whats puzzling me. How can Housecall and Norton say theres nothing there when a scan is done but still bring up the notifier.

Weird. My plan is to bring each machine to my office where there is not possible network connection and run all these tools again on each machine. Then if it comes back oh well no idea.

 

If you are running Windows ME it * MAYBE * in the System Restore files.

When ME is infected with a Virus ALL should be deleted.

How you do it I am not sure as I dumped ME four days after I
installed it.

There is a post SOMEWHERE on this BBS that deals with just such a case.

BillyBob

 

BillyBob:

System Restore points are deleted by turning System Restore off, rebooting and turning it back on.

 

These are windows 98 2nd machines.

 

How are things going gghartman? Any progress on sorting this one out?

Daizy

 

Yes and not sure yet. Have shut down the open shares and added a per folder access and surprising it has lessened. Not sure if this will work but so far its better. Not totally sure why shutting down the open shares made this difference.

Am going on site next week and remove McAfee Firewall cuz it aint acting like it should. Going to install Black Ice.

Thanks for keeping in touch Daisy.

 

Hi again gghartman
And thank YOU for keeping us updated. Speaking of firewalls, have you been following this thread at all?

Daizy