Help with getting rid of a virus.

[Fox5]

Ok, I have the trend pc-cillin virus scanner, and it keeps reporting different files with the w97m_marker and it unable to delete, quarantine, clean, or anything else. I deleted all the infected files and read the info on the virus and deleted the files related to it, however it keeps on appearing in different files. I believe the virus sends your computer information to some hackers, anyone know how to get rid of it for good?

 

[Arrow]

Format your drive. No, really, formatting your drive is the safest way about it.

Rob
Please visit <b><A HREF="http://www.ncix.com/canada/index.cfm?affiliateid=319048" target="_new">http://www.ncix.com/canada/index.cfm?affiliateid=319048</A></b>

 

[Fox5]

Well that stinks; does the virus actually do any damage, especially since I deleted the files it makes use of, or will it just mark files?

 

[WiseGuy1]

Apparently it deletes certain submenus in document program's like "print preview" , "open", "exit", etc. under the file menu in Micro. Word and other programs like that. Check these out:
<A HREF="http://www.antivirus.com/vinfo/virusencyclo/default5.asp?VName=W97M_MARKER.EI " target="_new">http://www.antivirus.com/vinfo/virusencyclo/default5.asp?VName=W97M_MARKER.EI </A>
<A HREF="http://www.antivirus.com/vinfo/virusencyclo/default5.asp?VName=W97M_MARKER.EQ " target="_new">http://www.antivirus.com/vinfo/virusencyclo/default5.asp?VName=W97M_MARKER.EQ </A>
Apparently there's quite a few varities of the little ah heck. I don't know about PC-cillian, but some virus scanners won't delete a file if it ends with a certain extension or atleast it asks you several times if your sure you want to delete a file with that extension for risk of doing damage.

<P ID="edit"><FONT SIZE=-1><EM>Edited by WiseGuy1 on 10/01/01 10:33 PM.</EM></FONT></P>

 

[Fox5]

I think pccillian is made by trend. Also, the version I have has no extensions, it is just the name and the description of it was something about collecting information about your computer and uploading it to an anonymous group of hackers.

 

[WiseGuy1]

It may be this beast, <A HREF="http://www.antivirus.com/pc-cillin/vinfo/virusencyclo/default5.asp?VName=W97M_LOCALE.D " target="_new">http://www.antivirus.com/pc-cillin/vinfo/virusencyclo/default5.asp?VName=W97M_LOCALE.D </A> Which makes since because it's a combination of W97M_LOCALE and W97M_MARKER from what they say, it uploads info, and it disables virus protection according to Trend. Which might explain why you can't deleate it. I guess to make a long story short you'll probably have to do what arrow suggested.

 

[HonestJhon]

i have been in that boat before, viruses suck, but the real way to get rid of the ones that just keep reappearing is to reformat...and, maybe there is a file that the virus is hiding in, which you open and the file reinfects when you do this..
i once had pc-cih i believe it is called, and that thing was uncleanable....and the only way i was able to rid myself of it was to reformat..
and man...did that suck, since i had so many files that i hadnt backed up on cd..
but oh well, i guess i learn my lessons eh?
ugh...viruses...

-DAvid

-Vacuums suck...really...-