*Information regarding models sold between September 2007 and April 2008

Toshiba found the files associated with a certain virus on the hard disks of some models of the following notebook PCs. Please take necessary steps as described in the following instructions.


PSL48E-02N02KGR
PSL48E-02N031ZA
PSL48E-02P02TRU
PSL48U-01300Y
PSL48E-03002SH3
PSL49E-004005KS
PSL49E-006005KS
PSL49E-00C005KS
PSL4BE-00F002GR
PSL4BE-00J002GR
PSL4BE-00U010GR
PSL4BE-00W010GR
PSL4BE-00Y010GR
PSL4BE-011010GR
PSL48E-03102QG3
PSL48E-033008EN
PSL48E-01D008EN
PSL48E-01D01FAR
PSL48E-01D01GG4
PSL48E-01D01HG3
PSL48E-01D01RH3
PSL48E-01D01TZA
PSL48E-01E008EN
PSL48E-01E01FAR
PSL48E-01E01GG4
PSL48E-01E01HG3
PSL48E-01E01RH3
PSL48E-01E01TZA
PSL48E-01F01UGR
PSL48E-01R00DS4
PSL48E-01R01QGE
PSL48E-02201QGE
PSL48E-02M00DS4
PSL48E-02M02QG3
PSL48E-02M02RGE
PSL48E-02N02NAR
PSL48E-02N02PG4
PSL48E-02N02QG3
PSL48E-02N02SH3
PSL48E-02N02TRU
PSL48E-02P008EN
PSL48E-02P02QG3
PSL48E-02P02SH3
PSL48E-02P031ZA
PSL48E-02Y01UGR
PSL48E-02Y02KGR
PSL48E-03002QG3
PSL48E-03602NAR
PSL48E-03602PG4
PSL48E-03602QG3
PSL48E-03602SH3
PSL48E-03702NAR
PSL48E-03702PG4
PSL48E-03702QG3
PSL48E-03702RGE

On the hard drive of some Satellite L40/45 / Satellite Pro L40 / Equium L40 / Satego L40 models sold between September 2007 and April 2008, the files RavMon.exe and Autorun.inf have been found. These files are associated with the virus W32.Nomvar (Symantec name). Depending on the system environment, the subject virus may have already been moved to quarantine by the Auto Protect feature of the pre-installed anti-virus software Norton Internet Security (trial version).

Please note that although the virus files are located on all drives of the affected models, the pre-installed operating system image is not infected by the virus.

In the case of an (unintentional) activation, the subject virus will attempt to spread by copying itself to all available drives (including removable media and network shares). Furthermore, it will attempt to download additional harmful software from a specific Internet web site. Because this web site has been shut down already, chances are remote that any actual harm will occur in the unlikely case of an unintentional activation of this virus.

Your pre-installed Symantec anti-virus software (Norton Internet Security trial version) will detect and quarantine the subject virus if your notebook PC is affected. In case of doubt, please run a system scan with Norton Internet Security (or the anti-virus software of your choice) to make sure that the virus files have been quarantined.

If you have replaced the preinstalled anti-virus software with the anti-virus software of your choice, you should run a virus check with this anti-virus software. Major antivirus software will detect, remove, and quarantine the virus files.

Alternatively, you can also use a special tool Toshiba released for download to remove the virus file from all drives of your notebook PC’s hard disk. Please follow the link below:

Download T-Remover

Please click here and follow described procedure to remove the virus with above tool

Please click here to achieve information about the virus

(14 Cent/Min. aus dem deutschen Festnetz, ggf. abweichende Preise aus dem Mobilfunk)
(10ct/min aus dem Festnetz der Telekom Austria)