Author Topic: virus cleaner doesn't remove Sober-H worm  (Read 2843 times)

0 Members and 1 Guest are viewing this topic.

occimoron

  • Guest
virus cleaner doesn't remove Sober-H worm
« on: November 06, 2005, 06:54:43 PM »
Avast has detected several files infected with the Sober-H worm. I downloaded and ran the virus cleaner ASWCLR, then re-scanned with Avast. the worms show up again in the scan. Is the virus cleaner not working? what else can I do?

Offline Lisandro

  • Avast team
  • Certainly Bot
  • *
  • Posts: 67183
Re: virus cleaner doesn't remove Sober-H worm
« Reply #1 on: November 06, 2005, 07:05:46 PM »
Avast has detected several files infected with the Sober-H worm. I downloaded and ran the virus cleaner ASWCLR, then re-scanned with Avast. the worms show up again in the scan. Is the virus cleaner not working? what else can I do?

Reinfection is normal if you don't use 'special' methods of cleaning. It's not a problem of avast but a virus behavior.

Are you using Windows XP?
Can you schedule a boot-time scanning?
Start avast! > Right click the skin > Schedule a boot-time scanning
Select for scanning archives.
Boot.

Other option is scanning in SafeMode (repeatedly press F8 while booting): http://support.microsoft.com/default.aspx?scid=kb;en-us;315222

Other good thing is disable System Restore, boot, enable it again. If you find a virus keeps coming back after you delete it, it's most probably infected the System Restore folder, the best way to solve this is to disable System Restore, reboot your machine and then enable it again. After all, run a full avast! scanning. System Restore cannot be disabled on Windows 9x and it's not available in Windows 2k.

Enable/Disable System restore on Windows ME: http://support.microsoft.com/default.aspx?scid=kb;en-us;Q264887
Enable/Disable System restore on Windows XP: http://support.microsoft.com/default.aspx?scid=kb;%5BLN%5D;310405
The best things in life are free.

Offline igor

  • Avast team
  • Serious Graphoman
  • *
  • Posts: 11873
    • AVAST Software
Re: virus cleaner doesn't remove Sober-H worm
« Reply #2 on: November 06, 2005, 07:06:15 PM »
Where exactly were the files detected?