Ask the Expert

Eliminating Goner once and for all

I was a victim of the Goner virus. I followed all the instructions to remove it and even ran the removal utility, but it still shows up in system scans from the Norton Antivirus Corp. Edition. My settings on the Norton are to delete the virus on discovery, but it still shows up in the scan.

    Requires Free Membership to View

First, ensure you have not been re-infected with a different strain of the Goner virus. There are three that I know of off the top of my head, and I'm sure there are many more.

Second, ensure Goner has not removed the Norton program. Yes, this is possible. If so, reinstall Norton and update the virus definitions.

I'm unsure of the operating system you are using, but I do know there are different procedures with Windows ME versus Windows NT.

Depending on the infection, your entire PC base may need to be checked for each of my suggestions above. It takes only one infected machine to re-infect the entire network.

Since I do not know your network or the infrastructure in which your machines operate, these are the best suggestions I can make. Good Luck.

For more information on this topic, visit these other SearchSecurity resources:
News & Analysis: Goner worm could have been prevented
News & Analysis: Goner cleanup
Ask the Expert: Manual removal of Goner from an infected machine

This was first published in March 2002

There are Comments. Add yours.

TIP: Want to include a code block in your comment? Use <pre> or <code> tags around the desired text. Ex: <code>insert code</code>

REGISTER or login:

Forgot Password?
By submitting you agree to receive email from TechTarget and its partners. If you reside outside of the United States, you consent to having your personal data transferred to and processed in the United States. Privacy
Sort by: OldestNewest

Forgot Password?

No problem! Submit your e-mail address below. We'll send you an email containing your password.

Your password has been sent to: