Solved

W32.Spybot.worm Virus

Posted on 2007-04-01
6
299 Views
Last Modified: 2013-11-22
Hi
My computer got infected W32.spybot.worm.
We have Norton Anti Virus Corporate Edition 10.0 and client Security got installed on all work stations.
But even after a thorugh scan virus is not getting removed.
Is there any removal tool (free to use is available) for this virus.
Please advise
0
Comment
Question by:Jinesh Kumar Kochath
6 Comments
 
LVL 23

Expert Comment

by:phototropic
ID: 18834816
0
 
LVL 23

Expert Comment

by:phototropic
ID: 18834822
Sorry, that's just removal instructions, not a tool.  There is a complete guide to the removal process here:

http://www.depts.ttu.edu/helpcentral/Quick_Fixes/W32_Spybot_Worm_Fix.php
0
 

Author Comment

by:Jinesh Kumar Kochath
ID: 18849055
still not able to remove
please advise
0
Is Your Active Directory as Secure as You Think?

More than 75% of all records are compromised because of the loss or theft of a privileged credential. Experts have been exploring Active Directory infrastructure to identify key threats and establish best practices for keeping data safe. Attend this month’s webinar to learn more.

 
LVL 23

Accepted Solution

by:
phototropic earned 250 total points
ID: 18849447
Did you use this tool as recommended in the link?  
http://www.wmsoftware.com/download.aspx?product=chktrust
0
 
LVL 10

Assisted Solution

by:dragonjim
dragonjim earned 250 total points
ID: 18851958
I had the same problem. The worm is exploits a vulnerabily in 10.0 -- upgrading to 10.1.5.5000 cleaned things up.

Need to follow the manual removal directions on symantec site above as well. (Scan registry, scan files, allow Symantec to clean up).

Also -- TURN OFF SYSTEM RESTORE. (You can restart it if you wish once you are sure you're clean).

-- I personally have system restore turned off on all corporate machines.
0
 
LVL 38

Expert Comment

by:younghv
ID: 19039781
jineshk,
This question has been hanging out here for over a month.
Have you had any success with the suggestions?

You might also want to try your removal process in 'Safe Mode'. Frequently malware can hide behind normal processes and avoid detection.

Vic
0

Featured Post

Is Your Active Directory as Secure as You Think?

More than 75% of all records are compromised because of the loss or theft of a privileged credential. Experts have been exploring Active Directory infrastructure to identify key threats and establish best practices for keeping data safe. Attend this month’s webinar to learn more.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

There are many HijackThis tutorials on the web already, so this article is about tips that help utilize HijackThis' full potential as a diagnostic tool. Download HijackThis from a TrendMicro link or from known reliable sources only. http://free.…
The purpose of this Article is to provide information for a newly released variant of malware – with the assumption that many EE Members will have need of the information. According to “Computerworld”, well over one million web sites have been co…
Internet Business Fax to Email Made Easy - With  eFax Corporate (http://www.enterprise.efax.com), you'll receive a dedicated online fax number, which is used the same way as a typical analog fax number. You'll receive secure faxes in your email, f…
Learn how to create flexible layouts using relative units in CSS.  New relative units added in CSS3 include vw(viewports width), vh(viewports height), vmin(minimum of viewports height and width), and vmax (maximum of viewports height and width).

910 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

21 Experts available now in Live!

Get 1:1 Help Now