Quote:
Originally Posted by LD
Just curious - if a person has their AV prog set to to do a full scan at regular intervals or chooses to do a manual scan and this virus has disabled the ability of the prog to scan, one would be able to detect (at least visually) that the scan isn't working - correct?
|
Actually, the scanner is not removed. Rather, it is modified by the virus to not recognize the infection, thereby giving the appearance that all is well.
A well developed AV application will, in the course of its regular updates, correct such modifications. However, not all AV products are either so well developed and/or so nimble as to be able to avoid being re-modified.
As removing & re-installing some AV products, particularly Norton Anti-Virus, can be exceedingly problematic, yielding a "busted" machine, to the point that the hard drive may need to be completely re-imaged, a better route is to use one or more different AV products to scan the machine before resorting to removing the existing AV application.