Maddoctor

There is the possibility that this is being caused by a virus so assume that it is.

Make sure that Windows firewall is enabled (Norton recomend switching this off but as Norton is switching off you need something), Dissable system restore, boot in safe mode and do a full virus scan.

You could also check the Norton logs to see if they give any clues.

Optimist , I have MS firewall ON and Norton off. Norton anti-virus is not affected and has remained on. Going to do a scan.

Optomist:
Found out that the Pcs have an integrated Video card that was set to use 64mb of memory.Re-set it to 16mb and now have 240 ram showing.
If i want to buy a new Video card.How do i disable the integrated one??

Iain

It's a bit naughty selling a computer with 256MB RAM and then configuring 64MB out but I suppose thats computers for you.

There should be a setting in the BIOS to dissable the onboard graphics card. As well as saving memory, this will also take some load off the processor.

Any ideas what I can do with a virus infected file that Norton has found,
that it can't beat currently - refuses to be repaired,quarrentined OR
very worryingly deleted!
Norton has given it the usual 'don't know' title of
Bloodhound.Packed virus
and it is in file (?) named c\\windows\system32\FScET.dll
and that means absolutely jack to me! LOL
Seriously I'm not laughing, keep getting the virus alerts screen up
but what can I do???????

If i disable the onboard card will i get a display?

Stockbunny

Try

Dissable system restore.
Start Machine in safe mode.
Run Virus scan.

When sorted enable system restore.

Iain

So long as you have a graphics card in the AGP or a PCI slot your system should! find it.

Eureeka!Its going a lot faster=Happy kids playing "Sims 2" and it doesnt keep crashing.
Right.Back to trading away my cash:-)))

Optimist - have dissabled system restore
do I now re-start the PC?
Sorry lost me with the second bit...

Stockbunny

Yes. Restart the computer and when it says starting windows press F8. You should see a load of options, select Safe mode with networking. This will start a basic version of Windows in which the viruses shouldn't be able to start. Then you can remove them.

Optimist - I doubt you are still about but...
did as you said and the virus scan showed the infected file,
but repair, quarantine and delete still all failed.
Restored system restore, if you follow me and decided to go for
the last resort - restoring the system to an earlier date...
It wont work (wail!) so I guess this 'shite' virus (excuse the
'bunny language') wrecks system restore. Any other ideas.....
:>(

Stockbunny:
Thats when ive had to format drive in the past.I use Norton Go Back instead of sytem restore.Since then no probs on Main machine

Stockbunny

Don't think about reformating your drive.

Did you do the scan in safe mode?

Have you any more details on the virus? I couldn't find anything on the file that you listed.

Yes Optimistic I did the scan in safe mode, but it still couldn't do
anything with it. The file appears to be in c:\\windows\system32\export
that's where it showed up in the virus scan in safe mode but in the
other file - or sub-file - in normal mode.

Stockbunny

To start with, when in safemode, open Windows Explorer, Navigate to the folder where the file is and try to rename it.

You may have to enable viewing of hidden and operating system files (In windows explorer Tools/Folder Options then the View Tab).

Once youve renamed it and made sure that everhything works and the computer is clean, then you can delete it.

Optimist - by the way thanks, you've been a hero today :>)
OK I know some things aren't allowed in renaming files,
so I presume I have to put c:\\windows\system32\
but instead of the existing FScET.dll can I put newbie instead?
does it need the .dll at the end?
Sorry I really am a techo-twit...

The c:\windows\system32\ is the directory or folder that the file is in. The filename is FScET.dll it doesn't matter what you rename it to but I suggest "orig_FScET.dl_". This is good practise should you need to put things back.

Are you comfortable using Windows Explorer?

I think so I'll go have a look at it now - think I've been
in there before - obviously I wont do anything yet, just have
a look about.

I just thought, you need to be logged on as an Administrator to get into c:\windows\system32\


Any problems, PM me your phone number and I'll talk you through it.