Hall of Fame

1. rpggamer...264,501
2. warturtle159,232
3. xmachine121,568
4. Admin3k95,624
5. David-Ho...76,727
6. johnb676736,082
7. optoma34,538
8. Computer...32,298
9. greyknigh...32,017
10. moh10ly28,014
11. surfer2423,430
12. JeremySB...19,636
13. MikeHolcomb19,486
14. legalsrl17,600
15. Jonvee17,494
16. IndiGenus16,830
17. ljones_cna16,825
18. dstewartjr14,680
19. jhyiesla14,398
20. NaturaTek13,331
21. torimar12,825
22. LeeTutor11,684
23. bRvO11,500
24. younghv11,462
25. thinkpads...11,310

1. rpggamer...732,346
2. IndiGenus287,259
3. warturtle159,232
4. Admin3k151,164
5. younghv126,007
6. xmachine122,968
7. David-Ho...102,152
8. phototropic85,780
9. moh10ly77,373
10. johnb676772,495
11. r-k71,908
12. Sheharya...49,873
13. legalsrl41,275
14. war138,050
15. optoma34,538
16. greyknigh...33,742
17. orangutang32,309
18. Computer...32,298
19. briancassin30,806
20. jimmymcp0229,920
21. rindi26,614
22. michko26,180
23. Tolomir25,100
24. jhyiesla25,098
25. surfer2423,430

	[x] Posted via EE Mobile
	Search, ask, and monitor your questions on the go with EE Mobile. Visit Experts Exchange from your mobile device and never be out of touch again.

Question

	[x] Attachment Details

[x]

The Solution Rating System

With so many solutions, how can you tell which solutions are most likely to help you and which ones are not? To provide you with a tool to use, we rate our solutions based on various elements that most accurately determine if a solution is a quality solution. To explain what factors affect the solution rating, here are the elements we take into consideration when formulating our solution rating.

The Grade of the Solution
The Zone Rank of the Expert Providing the Solution
The Number of Author and Expert Comments
The Number of Experts Contributing
The Feedback of the Community

Your Input Matters
Because of the way the system is set up, the most important variable in this equation is you. As a member of Experts Exchange, you are able to cast your vote on the quality of the solutions in regard to how complete, accurate, helpful and easy to understand each solution is. When you provide your feedback, each rating is adjusted accordingly. So, if you see a solution that has a poor rating that you think is a good solution, let us know by rating it. As you do, the rating will be adjusted and will become more accurate for other members of our site.

If you have any suggestions that you would like to make for our rating system, please ask a question in the Suggestions Zone of Community Support.

Thank you!

7.0

cant remove w32.spybot.worm

Asked by dustinwk in Anti-Virus, Anti-Virus Applications, Networking Security Vulnerabilities

Tags: remove

a few days ago our bussness network came to a crawl as several pc's on the network had been infected with W32.Spybot.Worm. We are running symantec antivirus 10.1.4.somthing and all clients have up to date antivirus deffinitions. So how did we get infected with this virus from the year 2003? Its not that symantec did not know about the virus as an alert would pop up stating that we had the virus but it could not quarantien it, or delete it and so on. what good is it if it wont take care of it. following symantecs removal instructions it took me all day and a half to remove the virus from all the pcs here at work including my servers. the virus was putting a file svshost (not svchost) in the system32 folder and several references to it throuout the registry. doing a search for svshost in the registry editor found many many many more entries that symantecs removal instructions mentioned. Did they not know about these or what? the whole thingis a bit off putting and im thinking of switching to another av company.

anyway here is the important part. On a couple of the pcs here at the office the virus seems to keep coming back. im not sure from where. but then again maybe its not. here is what happens. when i log in to some of the pc's one in particular i get the warning that symantec has found the w32.spybot.worm in the svshost file located in the system 32 folder and that quarantien was unsucsessfull. but when I go to the system32 folder and look the file is not there. I do of course have hidden and system files showing. doing a search on the registry turnes up no results. If I go to the symantec threat historh log there is no entry. so what the heck is norton finding if it does not exist? doing a full scan will turn up nothing even if it is runn in safemode.

when i removed this from the pc's on the network i followed the symantec removal procedure on their website to the letter in addition to the registry keys mentioned i did a full registry search for svshost and deleted several more entries. but i get the feeling its not completely gone. does anyone have any idea how i may hav got this worm or how to make sure it is gone?

View the Solution FREE for 30 Days

20091021-EE-VQP-81

cant remove w32.spybot.worm

Asked by dustinwk in Anti-Virus, Anti-Virus Applications, Networking Security Vulnerabilities

Tags: remove

About this solution