troubleshooting Question

Spybot - Can't remove virus

Avatar of dfranklin80
dfranklin80 asked on
Anti-Virus Apps
12 Comments1 Solution1432 ViewsLast Modified:
We are experiencing a problem with a virus.  It is a SPYBOT.32.WORM virus.  It adds entries to the host file (basically for all related virus companies so you can't get to their site).  It disables the Symantec Antivirus services.  When detected by the antivirus, it asks if you want to remove it, if you say "yes" it reboots your PC.  If you boot up in safe mode, it will remove the virus, but will then become infected again so the latest Symantec does not appear to be working.

Files that are effected are c:\windows\winins.exe and c:\windows\eraseme_###### (various numbers).  Symantec has been less than helpful ... including telling us to call back if that didn't work (5 minutes before they cut off coverage for the night).

We are on the latest antivirus version (10.1.6.6000) and the virus defs for today (7.24.2007 rev16).

Impact: PC rebooting and causing excessive network traffic that appears to be overloading the print servers.
ASKER CERTIFIED SOLUTION
Computer101

Our community of experts have been thoroughly vetted for their expertise and industry experience.

Join our community to see this answer!
Unlock 1 Answer and 12 Comments.
Start Free Trial
Learn from the best

Network and collaborate with thousands of CTOs, CISOs, and IT Pros rooting for you and your success.

Andrew Hancock - VMware vExpert
See if this solution works for you by signing up for a 7 day free trial.
Unlock 1 Answer and 12 Comments.
Try for 7 days

”The time we save is the biggest benefit of E-E to our team. What could take multiple guys 2 hours or more each to find is accessed in around 15 minutes on Experts Exchange.

-Mike Kapnisakis, Warner Bros