I was at a client's house this morning and their computer (used by everyone) has been infected with both the talkstocks.net and realphx.com worms. However, none of the removal tools nor a fully updated Norton AntiVirus 2002 can delete all the files related to these viruses.
Every user (XP Home) gets a warning from Norton on startup about files infected with Downloader.Trojan or Trojan.Sinkin. Symantec says all you need to do to remove these viruses is boot into safe mode, run a system scan, and delete the registry entries. However, when I do that, Norton doesn't find the files and the registry keys don't exist. Also, I can't access the folders in safe mode that these files are in (C:\documents and settings\user\Local ...). When I delete these files from every user in the normal boot, they simply come right back on reboot.
Any help?
Every user (XP Home) gets a warning from Norton on startup about files infected with Downloader.Trojan or Trojan.Sinkin. Symantec says all you need to do to remove these viruses is boot into safe mode, run a system scan, and delete the registry entries. However, when I do that, Norton doesn't find the files and the registry keys don't exist. Also, I can't access the folders in safe mode that these files are in (C:\documents and settings\user\Local ...). When I delete these files from every user in the normal boot, they simply come right back on reboot.
Any help?