Solved

how do I get rid of BO:Writable

Posted on 2008-10-17
5
1,246 Views
Last Modified: 2012-05-05
How do I get rid of the BO:Writeable virus
0
Comment
Question by:donsowar
  • 2
5 Comments
 
LVL 92

Accepted Solution

by:
nobus earned 250 total points
ID: 22747324
0
 
LVL 27

Assisted Solution

by:Jonvee
Jonvee earned 250 total points
ID: 22747925
If you scroll to the recommendations by moh10ly and rpggamergirl in this previous thread, you should be able to remove the problem>

"How do I get rid of the BO:Writable -or- the BO:Heap virus alert":
http://www.experts-exchange.com/Software/Internet_Email/Anti-Virus/McAfee/Q_23435081.html
0
 
LVL 27

Expert Comment

by:Jonvee
ID: 22747943
From the link above you'll see you need to run HijackThis 2.02:
http://majorgeeks.com/Trend_Micro_HijackThis_d5554.html

Create a folder where you would like the HijackThis file to reside and run it from there, not from the Desktop or a temporary folder.
Run the scan & save the logfile.  Then click the "Attach Code Snippet" box, paste the logfile into the "Code Snippet" page & there we can analyse it.  

After running HijackThis it's probable you'll need to run Combofix to resolve it.
Download ComboFix and save to your Desktop >
http://download.bleepingcomputer.com/sUBs/ComboFix.exe

Before using ComboFix please disable any realtime Anti-virus, Anti-spyware, Shields, etc. that you may have running, and remember to re-enable them later, upon completion.

Double click "combofix.exe" and follow the prompts.
When it's finished it will have produced a Logfile, probably at C:\ComboFix.txt.
You could post that log together with a HijackThis log, in a reply for us.
Please do not mouseclick Combofix's window while it is running, because it may stall.  It is absolutely normal for you to see a blue screen with flashing cursor, and this can last for up to 30 mins.  Just let it run.

ComboFix does present a slight risk to your system, but it's worth considering, especially if HijackThis finds nothing & yet you are quite heavily infected.
0

Featured Post

Industry Leaders: We Want Your Opinion!

We value your feedback.

Take our survey and automatically be enter to win anyone of the following:
Yeti Cooler, Amazon eGift Card, and Movie eGift Card!

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Suggested Solutions

When you try to extract and to view the contents of a Microsoft Update Standalone Package (MSU) for Windows Vista, you cannot extract the files from the MSU. Here we are going to explain how to extract those hotfix details without using any third pa…
This article summaries thoughts and ideas from two years of sustained use. It provides good reasoning to make the jump to Windows 10.
In this video, we discuss why the need for additional vertical screen space has become more important in recent years, namely, due to the transition in the marketplace of 4x3 computer screens to 16x9 and 16x10 screens (so-called widescreen format). …
The viewer will learn how to successfully create a multiboot device using the SARDU utility on Windows 7. Start the SARDU utility: Change the image directory to wherever you store your ISOs, this will prevent you from having 2 copies of an ISO wit…

763 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question