What to do when Norton AntiVirus 2003 detects a virus, worm, or Trojan
|
|
|
Print this page |
|
|
-
- We suggest that you print this page before you start.
- Expand each section by clicking the "+" before you actually print. PRINT
| |
|
|
|
Special note for Windows Millennium Edition and Windows XP users |
|
|
-
- One of the features of Windows Me and XP is System Restore. This feature is enabled by default and is used by Windows to restore files in case they become damaged. Windows Me and XP keep the restore information in the RESTORE folder. A RESTORE folder is created on each hard drive on the computer; these folders are updated when the computer restarts.
- While this is a desirable feature, in some cases it should be temporarily turned off. For example, if the computer is infected with a virus, then the virus could be backed up in the RESTORE folder. By default, Windows prevents System Restore from being modified by outside programs. As a result, there is the possibility that you could accidentally restore a virus-infected file or that online scanners would detect the virus in that location.
- When you disable System Restore and restart the computer, it will purge the contents of the RESTORE folder. For instructions on how to disable the system restore utility, follow the steps in the document that applies to your version of Windows:
-
- After the System Restore utility is restored, then run another scan with Norton AntiVirus to make sure that the computer is virus-free.
| |
|
|
|
Select the alert type that was displayed |
|
|
In most cases, Norton AntiVirus 2003 automatically repairs virus-infected files or automatically deletes files that are infected by a worm or Trojan. After a successful repair or deletion, Norton AntiVirus displays a window to inform you of the detection and what action was taken. The appearance of the window differs depending on whether Auto-Protect or the manual scanner detected the infection. Follow the information under the section for the type of alert that was displayed.
|
|
Auto-Protect detection |
|
-
- When you see this alert, if you have Internet access and want more information on the threat, then click the virus name to go to the Symantec Security Response online virus encyclopedia. (For example, in this case, click EICAR Test String.)
- If Norton AntiVirus cannot successfully repair a virus-infected file or delete a worm- or Trojan-infected file, then it will attempt to automatically quarantine the file. See the document What to do after you quarantine a file for more information about the quarantine process.
- If quarantine is not successful, then Norton AntiVirus will attempt to delete the file. A successful deletion bypasses the Windows Recycle Bin and completely removes the file from the hard drive.
-
If Norton AntiVirus cannot delete the file, then it denies access to the file to make sure that the file cannot infect the computer. For more information on why Norton AntiVirus denies access to a file, see the document What does it mean when Norton AntiVirus denies access to a file? | |
|
|
Manual scan detection |
|
- 1
- Click More Details for information on the results of the repair process.
- If you want more information on the threat and you have Internet access, then click the virus name to go to the Symantec Security Response online virus encyclopedia. (For example, in this case, click EICAR Test String.)
|
- 3
- If quarantine is not successful, then Norton AntiVirus will attempt to delete the file. A successful deletion bypasses the Windows Recycle Bin and completely removes the file from the hard drive.
|
| |
Document ID: 2002051411085406
Last Modified: 10/20/2006
Date Created: 05/14/2002
Operating System(s): Windows 98, Windows 98 SE, Windows 2000, Windows XP Home Edition, Windows XP Professional Edition, Windows Me, Windows XP
Product(s): Norton AntiVirus 2003, Norton AntiVirus 2003 Professional Edition