WelcomeProductsViruses & RisksSupportDownloadsStore
Home & Home Office
Symantec.com > Home & Home Office > Support > Knowledge Base


What to do when Norton AntiVirus 2003 detects a virus, worm, or Trojan

            
  Print this page

We suggest that you print this page before you start.
 Expand each section by clicking the "+" before you actually print. PRINT
 

            
  Special note for Windows Millennium Edition and Windows XP users
One of the features of Windows Me and XP is System Restore. This feature is enabled by default and is used by Windows to restore files in case they become damaged. Windows Me and XP keep the restore information in the RESTORE folder. A RESTORE folder is created on each hard drive on the computer; these folders are updated when the computer restarts.
 While this is a desirable feature, in some cases it should be temporarily turned off. For example, if the computer is infected with a virus, then the virus could be backed up in the RESTORE folder. By default, Windows prevents System Restore from being modified by outside programs. As a result, there is the possibility that you could accidentally restore a virus-infected file or that online scanners would detect the virus in that location.
 When you disable System Restore and restart the computer, it will purge the contents of the RESTORE folder. For instructions on how to disable the system restore utility, follow the steps in the document that applies to your version of Windows:
 After the System Restore utility is restored, then run another scan with Norton AntiVirus to make sure that the computer is virus-free.
            
  Select the alert type that was displayed

In most cases, Norton AntiVirus 2003 automatically repairs virus-infected files or automatically deletes files that are infected by a worm or Trojan. After a successful repair or deletion, Norton AntiVirus displays a window to inform you of the detection and what action was taken. The appearance of the window differs depending on whether Auto-Protect or the manual scanner detected the infection. Follow the information under the section for the type of alert that was displayed. 
Auto-Protect detection
When you see this alert, if you have Internet access and want more information on the threat, then click the virus name to go to the Symantec Security Response online virus encyclopedia. (For example, in this case, click EICAR Test String.)
 If Norton AntiVirus cannot successfully repair a virus-infected file or delete a worm- or Trojan-infected file, then it will attempt to automatically quarantine the file. See the document What to do after you quarantine a file for more information about the quarantine process.
 If quarantine is not successful, then Norton AntiVirus will attempt to delete the file. A successful deletion bypasses the Windows Recycle Bin and completely removes the file from the hard drive.
 
If Norton AntiVirus cannot delete the file, then it denies access to the file to make sure that the file cannot infect the computer. For more information on why Norton AntiVirus denies access to a file, see the document What does it mean when Norton AntiVirus denies access to a file?
Manual scan detection
1
Click More Details for information on the results of the repair process.
 If you want more information on the threat and you have Internet access, then click the virus name to go to the Symantec Security Response online virus encyclopedia. (For example, in this case, click EICAR Test String.)
2
If Norton AntiVirus cannot successfully repair a virus-infected file or delete a worm- or Trojan-infected file, then it will attempt to automatically quarantine the file. See the document What to do after you quarantine a file for more information about the quarantine process. If the infected file cannot be quarantined for some reason, read the document Norton AntiVirus displays the message "Unable to repair, quarantine or delete . . . access denied" when detecting an infected file.
3
If quarantine is not successful, then Norton AntiVirus will attempt to delete the file. A successful deletion bypasses the Windows Recycle Bin and completely removes the file from the hard drive.
4
If Norton AntiVirus cannot delete the file, then it denies access to the file to make sure that the file cannot infect the computer. For more information on why Norton AntiVirus denies access to a file, see the document What does it mean when Norton AntiVirus denies access to a file?

 

Available Translations:


RATE THIS SOLUTION
Was this solution helpful to you?
Yes
No
If any information was unclear, or the information you were seeking was not provided, please let us know. Your feedback will help us improve this service.

NOTE: Comments entered here will NOT recieve a personal email response.

Document ID: 2002051411085406
Last Modified: 10/20/2006
Date Created: 05/14/2002
Operating System(s): Windows 98, Windows 98 SE, Windows 2000, Windows XP Home Edition, Windows XP Professional Edition, Windows Me, Windows XP
Product(s): Norton AntiVirus 2003, Norton AntiVirus 2003 Professional Edition

Site Index · Legal Notices · Privacy Policy · · Contact Us · Global Sites · License Agreements
©1995 - 2009 Symantec Corporation