1 PC on Network Infected

[Cactus]

One of my pc's on the network has been infected with a virus.
I'm trying to run Norton Anti-vurus but it just keeps sending itself out.
How do I clean this out?

Cactus

[Geekgirl]

I would disconnect the computer from the network, DOH ! (hehe). Take out the h.d.d. and install in one of the others as slave and scan with anti-virus. make sure you definitions are up to date on all other computers first.

[brad]

[Gecko]

Use one of the uninfected system on you network to “map network drive” the hdd of the infected system.
Now you can use Norton on the uninfected system to scan the infected system.

[teststrips]

Many viruses are smart enough to look for and Kill the processes of major anti-virus programs. You'll start scanning, but only get about 20 seconds into it before the program mysteriously closes. When this happens, I suggest one of three options.

1.) (hardest) Shutdown and boot from a CD with virus definitions. Check out http://www.nu2.nu/corpmodboot/ for a DOS like boot disk, or http://www.nu2.nu/pebuilder/ for a CD that boots into a windows-like environment. Creating the disks takes a long time, but if you have constant virus problems it's the best/fastest way.

2.) (easy) Download and run McAfee Stinger. Stinger is a virus program that only searches for the most annoying viruses (like the ones that close normal antivirus programs.) Once you've run Stinger you should be able to run through a full scan with Norton Antivirus. A link to stinger can be found in the

3.) (easy) Check out Housecall antivirus. Housecall is a free, web based virus scanner. It runs completely from within internet explorer. There is also a link to housecall antivirus in the commonly recommended software programs thread.

[Cactus]

Thx everyone for helping me out...
At first I thought it was a BHO(thx to Brad for heading me in the right direction) but then turned my attention to the Network when everything came back clean.Out of the 4 pc's in the house this one is the 1 I use most...the Dual Boot pc.
Seeing that the prob was something more than Network probs I did what Geekgirl (thank u) said and pulled the Master HDD out,brought it to a buddies and set it up as Slave on his PC.
Then ran Norton Anti-Virus and then McAfee Stinger (thx teststrips).
Came back clean!
Hooked it back up as Master on the PC and scanned D:\ drive from C:\ drive...Nortons and Stinger again....all clean...

Then took Slave HDD and set it as Slave on the server pc and scanned it with Norton and Stinger....all clean!!

So I put the Slave Dr with XPpro back in the Dual boot PC and here I am!!

So where did it start??
Well it came in the mail on the wifey's pc!!
It had disabled her Norton Anti-Virus...I very rarely use it even though it is right beside me so I never noticed until I started trying to pin point the prob I was having....

Anyway it is slaved out on the Server pc being scanned as I post!!
I'll scan with Norton Anti-Virus first then Stinger...see what it finds!!

Then...lastly the kids pc!!
After the others are done,I'm going to try what Gecko suggested taking all pc's off Network except this one and Mapping the kids drive.Thx Gecko seems like an easy way to do it.Just curious...once it is Mapped....I can do the scan from the PC without Bootin up theirs or do i still have to boot it??

Again thx guys....

[Geekgirl]

I apologize I didnt think of this when I replied earlier but beings your using N.A.V. you could of went to Symantec, this link here

and d/l the Intelligent Updater, then brunt it on a cd and updated your definitions that way. It will work as long as your subscription is valid.
Again I apologize for being late in my reply, thought about it the whole time in the dentists chair
...but it looks like you were clean anyhow right?

Remember this for future reference

[Cactus]

B-I-N-G-O!!!

Norton came back clean on her pc....

But the Stinger!!!

Here's what it found:
4 versions of W32/Zafi.b@MM

Great little app TestSrtips...

Thx again everyone!!

Cactus

[Gecko]

You will have to boot it, if it's XP then you can boot into safe mode with network support.
If it's 98 boot to the login screen.

[teststrips]

stinger has saved me hours of work many times at several customer sites. I am a hardware tech, but when a virus keeps shutting down the PC or causing blue screens and the software can't remotely fix the problem, hardware guy to the rescue.

I keep the Bart bootdisks (Modboot and PEBuilder) updated with new virus defs about once a month...

I also wanted to point out that you could use one of the free antivirus programs for your kid's PC. AVG antivirus and AVAST antivirus both have free editions (one is called free... the other is called "home edition")
Check out the thread for links.