Re: W32.spybot.worm

From: Ron Chamberlin (ronchamberlin_at_msnmsn.com)
Date: 07/20/04

  • Next message: Ron Chamberlin: "Re: Backdoor.Trojan"
    Date: Tue, 20 Jul 2004 00:27:51 -0400
    
    

    In addition to what Gatekeeper advised, check for more information on the
    Symantec page:
    http://securityresponse.symantec.com/avcenter/venc/data/w32.spybot.worm.html
    You'll have to shut down System Restore, and go back in thru safe mode to
    get this one. Be aware that it has the capacity, and I have seen it, to act
    as a keystroke logging program also. I suggest you change any passwords that
    you use on the machine as soon as you disinfect it.

    Ron Chamberlin
    MS-MVP

    "ajbotko" <anonymous@discussions.microsoft.com> wrote in message
    news:028f01c46de7$a1f53090$a601280a@phx.gbl...
    > My virus detection software(Norton), keeps giving me a
    > message that I have the W32.spybot.worm, infecting my
    > computer. The infected file, is called ipgbuel.exe. The
    > software cannot quarantine, delete, or do anything to rid
    > my computer of the worm. In other words, Norton is
    > worthless. I have tried repeatedly to manually find and
    > delete the file, but the search reveals no such file.
    >
    > How do I get rid of the worm????


  • Next message: Ron Chamberlin: "Re: Backdoor.Trojan"

    Relevant Pages

    • RE: Internet Explorer has been hijacked by "About:Blank"
      ... However, after following the below steps, I finally got rid of it. ... You might want to turn off system restore (be careful, ... Reboot computer in Safe Mode. ... Then its recommended after all vestiges of Internet explorer are gone ...
      (microsoft.public.windows.inetexplorer.ie6.browser)
    • Re: Safe Mode Booting
      ... But prior to setting my config i turned off system restore as directed to get rid of the virus. ... >> To get rid of a virus I setup my system to boot directly into safe mode. ...
      (microsoft.public.windowsxp.general)
    • Re: Stuck in safe mode (System Restore disabled)....
      ... > switching off System Restore and running in Safe Mode. ... > This worked well and got rid of the infected files. ...
      (microsoft.public.windowsxp.general)
    • Re: System Restore issues
      ... Best thing to do is turn off system restore, start in safe mode and run all ... System restore points can become corrupt for various reasons, ... The thing is, if performing a system restore worked to get rid of malware, ...
      (microsoft.public.windowsxp.help_and_support)
    • INfected files in VSS
      ... If an infected file ends up in System Restore under Windows XP, ... way to get rid of it is to turn OFF system restore, ... What is the similar procedure in SBS 2003 where an infected file - although ... Gavin [SBS Consultant] ...
      (microsoft.public.windows.server.sbs)