I'm trying to fix a friend's computer that had Trojan.fakeavalert; as the virus is blocking his internet access, I'm using my computer for access. He has Symantec's anti-virus corporate edition. I have been following Symantec's directions as found here:
http://www.symantec.com/norton/security_response/writeup.jsp?docid=2007-101013-3606-99&tabid=3
and also the forum discussion re this virus
https://www-secure.symantec.com/connect/forums/virus-found-cannot-be-quarantined-cleaned-or-deleted-how-can-i-get-rid-it
The virus was quarantined except for one file C:\windows\system32\lsp.dll, which I managed to delete, so a system scan now shows no virus
At this point, access to the internet was still blocked so I went into the registry to check entries as per Symantec's list. I corrected some, a lot were not listed (I assume the virus does not delete entries?), and a few I was unsure of so I left them alone, but I did keep a detailed list of what I did or didn't do.
I checked the hosts file, but couldn't find any of the listed entries. I then tried to reboot the computer and it won't fully boot; I can't get past the point where the wallpaper pops up - nothing else loads, no taskbar no nothing! Please help... I'm totally lost and praying I haven't ruined my friend's computer.