Newbie

[kiwi]

Hi
Installed free trial version of PC anti virus and ran full scan which resulted in one virus detected worm- RBOT.BG . Then got a message " Some file(s) could not be removed or quarantined during this file scan.Please reboot your machine to complete this operation". So did that several times but the virus is still there. Is this because I,m running the free version and need to get the fill version or is PC anti virus not capable of removing this narsty in which case I wouldn't purchase the fill version. Have got PC tools regestary mechanic which is very good and why I opted to try PC tools anti virus

[c_edge]

If you are unable to remove worm- RBOT.BG, try running AV in safe mode.

The trial version is a fully functional version for 30 days so this should not affect the removal of infections.

c_edge:)

[kiwi]

Thank you c edge
Have to confess not up the sharp end with this stuff. How do i run in safe mode

[riFFz]

Hi Kiwi,

To restart in safe mode try this method:

1. Click on the Start button.
2. Click ''Shut Down'' from the menu (''Turn off Computer'' in XP).
The 'Shut Down Windows' dialog box will appear.
3. Select or Click "Restart" from the dialog box.
4. When the computer starts back up, immediately press the F8 key repeatedly until the Windows Startup menu appears with various options.
5. Using the up and down arrow keys on the keyboard, select 'Safe Mode'.
6. Login to your account (if asked).
7. Wait and eventually Windows will start in Safe Mode.

Cheers,

riFFz

[kiwi]

Hey thanks riFFz,
I thought thats how you did it just couldn't see safe mode option untill I moved the monitor screen over a bit.Anyway I took c edge's advice and did virus check in safe mode but all i did was find the file with the infection windows/system 32/ TFTP248 and scaned that file but still had the same result a message telling me to reboot which i did in both safe mode and normal but the worm RBot.BG is still there. What would happen if I deleted file TFTP248 to get rid of the worm would that affect my system.

[c_edge]

Could you please confirm the version you are currently using? Click on Help|About, please ensure you are using PCTAV 3.1 and perform a Smart Update.

You can re-download PCTAV 3.1 from www.pctools.com/anti-virus/download

c_edge:)

[kiwi]

Have PCTAV version: 3.1.0/10 Tried a smart update but the window freezes and shows not responding, think I might have to reinstall PCTAV:confused:

[c_edge]

If PCTAV freezes, uninstall it and try reinstalling in safemode.

You can also run a scan in safemode and once it detects the infection, it will provide a description.

copy the description if possible.

c_edge :)

[kiwi]

Hey thanks c_edge
I'll try a reinstall in safe mode and run another scan in safe mode this computer is used for CAD design and has over 1000 CAD files and takes about 8 hours to scan with PCTAV also my drawing files take way longer to open since installing PCTAV is this because they are getting scaned when they open if so is there a way to turn it off for my CAD program files. appreciate your help

Kiwi:) :)

[c_edge]

No probs.

PCTAV appears to be scanning the files causing the slow down, you can add the files into an exclusions list by going to OnGuard -> File Guard -> Scan Exclusions. This should speed up the scan time.

c_edge :)

[kiwi]

Thanks for that, will save alot of time opening drawing files, will report back when I've finished the process hopefully less 1 BOt

[glassy]

kiwi,

I had the exact same problem. Uninstalling and reinstalling in safe mode did not work (both safe mode and safe mode with networking). Neither did running it in safe mode (safe and safe w/networking). I finally got it to work by installing in safe w/networking, running in safe w/networking, but instead of automatically removing or quarantining items, I set it to ask me when an infection was detected. As soon as I did that, and clicke on remove when prompted, the virus was successfully removed! Hope that helps a bit. I know I was tearing my hair out over this, which is how I stumbled upon this forum. In my case, the nasty little worm was a strand of sdbot, but one that no other virus software detected.