Restrictions and then prog closing virus

[SharkAttack]

Yo,

I am fixing a relatives PC of a virus he had (it seems). The symptoms were that whenever he installed Norton or tried to run regedit and other progs he got an error "This operation has been cancelled due to restrictions in effect on this computer".

To get round this I changed the group policies to disable any file opening and registry restrictions. This worked but now the said programmes open for 2 seconds and are then forced shut.

Any idea how to kill this virus off? What is the best most reliable online virusscan?

[$c8t@]

Yo,

I am fixing a relatives PC of a virus he had (it seems). The symptoms were that whenever he installed Norton or tried to run regedit and other progs he got an error "This operation has been cancelled due to restrictions in effect on this computer".

To get round this I changed the group policies to disable any file opening and registry restrictions. This worked but now the said programmes open for 2 seconds and are then forced shut.

Any idea how to kill this virus off? What is the best most reliable online virusscan?

what operating system ??, the online scan i use is http://housecall.trendmicro.com... if its windows xp boot to safe mode with networking (others boot normally), this will allow you to get onto the internet but will prevent any "optional" services/processes starting when windows starts...this allowing any files that are infected, to be deleted, instead of the "access denied" error appearing because the file is in use...

lastly, the most common virus i have come across for this is W32.Gaobot.XX Variants...

you may also be required to delete system restore points as the virus may have been "backed" up at regular intervals with other data

$c8t@