Virus problem at work.

[Countcussy]

I am hoping somebody can help. A member of staff reported to me this morning that every time he executes Internet Explorer, our anti virus software (Anti-Vir) reports it as being spy.Goldun.ML. When i run a virus check,it also reports msr2c.dll Scano.AJ worm. Worryingly, it also detects infected files in the I386 folder.

The file has clearly tagged IE in some way, but i am unable to find any info about its removal on the web. The only things i can find are variants which do not match the files found.

The infected computer was working fine up until this morning.
I have disconnected the computer from the network, so no web access is possible.

If anybody can help as regards a fix, i would really appreciate it.

 

[michael baxter]

Download a trial of ZoneAlarm, update and scan/fix.

If you can't permanently fix it, then:

Backup any important data
Reinstall Windows

Exactly which anti-virus software do you usually use? Is that an Avira product?

Good luck!

 

[Duke]

I find NOD32 and Ewido antispyware a great combo for sorting out worms like that.

 

[Countcussy]

Not amused

Turns out it is a false alarm. The latest definitions update contained an error. By sheer chance, only one of our machines updated this morning. If all the machines reported the error, i may have suspected this.

Credit to Anti-Vir though. They released an update today to fix it. And it has.

Good job i did not accuse the member of staff of wrong doing