My FTP programs and some functions of my web browser fail to function after the removal of some files created by a Symantec on line virus scan. My CLAMWIN logs says this:

C:/WINDOWS/Downloaded Program Files/virscan9.dat: Trojan.Aavirus FOUND
C:/WINDOWS/Downloaded Program Files/virscan9.dat: Removed

How do I undo the damage done?

Robert

First i must say that doubt restoring this file will solve your problem, as it is in the downloaded program files folder, and now sane program would install necessary files in such a folder.

Second, whether or not you can restore the file depends on your settings.
If you set ClamWin (in the preferences) to Remove infected files, you no longer have it.
If you set ClamWin up to move files to Quarantine folder, you can open the Quarantine folder in Windows Explorer and simply copy the file back to the original location.

Quarantine should be in a directory like "C:\Documents and Settings\All Users\.clamwin\quarantine". You can find the exact location in the Preferences.

If you have system restore capability, that might help. I believe Win XP has a limited system restore capability.

If that can't/doesn't work, you could try reinstalling your version of Windows.

Personally, I've used GoBack for about six years now, and it has saved me on many occasions with my Win 98 system.

Regards,

iti si highly unlikely that virscan9.dat is responsible for the your internet connectivity. This is likely to be a part of McAfee online web scanner.

There is an article in the Security News about problems with some of McAfee's scanners.

Regards,