Are you having virus problems?

Question

The restore information is clogging up with viruses and everytime i try to remove them, the virus scanner bypasses the System Volume Information folder on C:/ where the viruses are located. How do I scan for, and delete, viruses in that folder?

Thanks

Answer

This question was answered on December 22, 2004. Much of the information contained herein may have changed since posting.

To scan for and delete the infected files:

1.) Start your Symantec antivirus program and make sure that it is configured to scan all the files

2.) For Norton AntiVirus consumer products: Read the document, "How to configure Norton AntiVirus to scan all files."

3.) For Symantec AntiVirus Enterprise products: Read the document, "How to verify that a Symantec Corporate antivirus product is set to scan all files."

Run a full system scan

4.) If any files are detected as infected with Adware.ShowBehind, click Delete.

Note: If your Symantec antivirus product reports that it cannot delete an infected file, Windows may be using the file

to fix this, run the scan in Safe mode.

For instructions, read the document, "How to start the computer in Safe Mode." Once you have restarted in Safe mode, run the scan again.

(After the files are deleted, you can leave the computer in Safe mode and proceed with section When that is done, restart the computer in Normal mode.)

To delete the value from the registry

****Important****: Symantec strongly recommends that you back up the registry before making any changes to it Incorrect changes to the registry can result in permanent data loss or corrupted files Modify the specified keys only Read the document, "How to make a backup of the Windows registry," for instructions

Click Start > Run

Type regedit

Then click OK

Navigate to the key:

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run

In the right pane, delete the value:

"ShowBehind"="%Widir%\snet\ShowBehind.exe"

Exit the Registry Editor.

To delete the remaining file and folder

Using Windows Explorer, delete the folder, %Widir%\snet.

Need Help with this Issue?

We help people with technology! It's what we do.
Schedule an Appointment with a location for help!

Author

Posted by cristina of Katharine Gibbs School - New York on December 22, 2004