Anti Virus 2009

[aephi alum]

Originally Posted by AGDee

In my experience, the virus disables McAfee before McAfee knows what's going on. It truly is making me crazy. It registers a dll and a handle and associates them with winlogon.exe and explorer.exe. You can't rename them or delete them because they are always in use, even in safe mode. When you delete their registry keys, the virus re-creates them immediately. Truly maddening. Now, I boot with a floppy boot disk and delete them through DOS. You can use process explorer to stop the handle association and then rename the files also, but until you've removed the handle association, it just keeps coming back.

ICK. That's nasty. What kind of sick puppies come up with this stuff?

[AGDee]

Originally Posted by aephi alum

ICK. That's nasty. What kind of sick puppies come up with this stuff?

The registry keys will keep re-creating themselves too. I tried changing values then changing the permissions on the keys to stop that and it just made a new registry key or changed it all back to how it was originally, even when I denied access to the registry key to EVERYBODY and the system account. I swear I was ready to kill that kid of mine.

[aephi alum]

Originally Posted by cheerfulgreek

You guys, today has been the biggest nightmare ever.
<snip>
The Dell guy told me Norton was the best one. He said that's what he uses. So I got that one.

I'm glad to hear you were able to recover your system and get back online. That Norton comment was very interesting - my brand new Dell laptop shipped with McAfee...

Originally Posted by AGDee

The registry keys will keep re-creating themselves too. I tried changing values then changing the permissions on the keys to stop that and it just made a new registry key or changed it all back to how it was originally, even when I denied access to the registry key to EVERYBODY and the system account. I swear I was ready to kill that kid of mine.

YEOW. That's really evil. I hope karma delivers a nasty bite in the posterior to whoever came up with this virus.