Hardware

Ask something
Question Locked

Windows Pro

0 helpful
3 replies

by wesley.chin

Closed to new repliesThis discussion is closed. It stays readable, but it takes no new replies.
There is a PC that is infected with worm called w32.gammima.ag. Symantec AV cleans it when the PC starts everytime. SAV quarantines files avpo.exe and mgg.exe. They are deleted permanantly via the quarantine. Apparantly, the aforementioned files were malware that also created a autnorun.ink file in the C drive. Ability to view hidden files is crippled by the worm. I suspect that is because the autorun.inf file is a hidden file. Unfortunately, the infected account is an administrator account. The PC in question is also very slow now. The registry keys that should be on the infected PC are not present. Given all that, is there some way to get rid of the worm and restore the PC to normal working order?

3 replies

by mjworsdale

Try to do a system resore to an earlier time if your on xp. This may replace the missing registry keys. Dunno about this getting shot of the worm entirely tho. May be worth scanning the restore points, check they have not been infected. I've had that before.

by Former member

Get two hdd's and do a copy on to one of them.
The other one would have the operating system on. If possible get Symantec to give you a bootup disk with the anti-virus software on and bootup using this disk, this will (should) kill off any bugs you have in the system since it runs in (like) dos mode. Hopefully your system will still be intact if not you still have a backup. If all is not well (you should always have a backup of your files) you could send the disk to Symentec for them to to have a look at.
Please post back if you have any more questions or problems.

This discussion is closed to new replies.