Virus question

  • Thread starter Thread starter Richard
  • Start date Start date
R

Richard

worm_spybot.bk

This virus keeps reappearing in the folder c:system volume
information\_restore(984....etc at regular intervals.
I run my virus killer (pc-cillin) and it never finds anything other than
this one file when it appears.

Any idea where I can look to eliminate this from my system?

Thanks
 
Please read the following URL:
http://vil.nai.com/vil/SystemHelpDocs/DisableSysRestore.htm

The objective:
------------------
- Turn off the System Restore function
- Reboot the PC
- Using your AV package, perform a full scan of all files on the platform and clean/delete
infectors found
- Turn on the System Restore function
- Reboot the PC
- Create a new System Restore point.

Dave



| worm_spybot.bk
|
| This virus keeps reappearing in the folder c:system volume
| information\_restore(984....etc at regular intervals.
| I run my virus killer (pc-cillin) and it never finds anything other than
| this one file when it appears.
|
| Any idea where I can look to eliminate this from my system?
|
| Thanks
|
|
 
thanks, i've tried this and disabled the system restore, run Av but nothing
found again. I want to restart my system restore but don't know whether i
can safely do this now?
any advice?
 
Go ahead.

Reboot into normal mode, perform a final scan of the platform.

If no infectors are found, restart System Restore and create a new Restore point.

Dave



| thanks, i've tried this and disabled the system restore, run Av but nothing
| found again. I want to restart my system restore but don't know whether i
| can safely do this now?
| any advice?
|
| | > Please read the following URL:
| > http://vil.nai.com/vil/SystemHelpDocs/DisableSysRestore.htm
| >
| > The objective:
| > ------------------
| > - Turn off the System Restore function
| > - Reboot the PC
| > - Using your AV package, perform a full scan of all files on the platform
| and clean/delete
| > infectors found
| > - Turn on the System Restore function
| > - Reboot the PC
| > - Create a new System Restore point.
| >
| > Dave
| >
| >
| >
| > | > | worm_spybot.bk
| > |
| > | This virus keeps reappearing in the folder c:system volume
| > | information\_restore(984....etc at regular intervals.
| > | I run my virus killer (pc-cillin) and it never finds anything other than
| > | this one file when it appears.
| > |
| > | Any idea where I can look to eliminate this from my system?
| > |
| > | Thanks
| > |
| > |
| >
| >
|
|
 
Duane Arnold said:
[email protected]:
Click to expand...
[snip]
http://nl.trendmicro-europe.com/enterprise/security_info/ve_detail.php?
VName=WORM_SPYBOT.BK

Google is your friend

Duane :)
Click to expand...


already tried that thanks. I have followed thru the instructions but the
virus remains
Click to expand...

I take it that you checked your registry and the affected entries detailed
in the link that Duane kindly suggested are not present in your machine?

Are you running a peer-2-peer on your PC? If yes, you may get re-infected.

Regards,

Mick
 
MickKi said:
Duane Arnold said:
[email protected]:
Click to expand...
[snip]
http://nl.trendmicro-europe.com/enterprise/security_info/ve_detail.php?
VName=WORM_SPYBOT.BK

Google is your friend

Duane :)
Click to expand...


already tried that thanks. I have followed thru the instructions but the
virus remains
Click to expand...

I take it that you checked your registry and the affected entries detailed
in the link that Duane kindly suggested are not present in your machine?

Are you running a peer-2-peer on your PC? If yes, you may get re-infected.

Regards,

Mick
--
Click to expand...


Mick, was this an attempt at helping me or just to have a cheap laugh in
front of your Sunday pub friends/hangers on
 
{ Dave snickers }


| Mick, was this an attempt at helping me or just to have a cheap laugh in
| front of your Sunday pub friends/hangers on
|
|
 
MickKi said:
[email protected]: [snip]

http://nl.trendmicro-europe.com/enterprise/security_info/ve_detail.php?
VName=WORM_SPYBOT.BK

Google is your friend

Duane :)


already tried that thanks. I have followed thru the instructions but the
virus remains
Click to expand...

I take it that you checked your registry and the affected entries detailed
in the link that Duane kindly suggested are not present in your machine?

Are you running a peer-2-peer on your PC? If yes, you may get re-infected.

Regards,

Mick
--
Click to expand...


Mick, was this an attempt at helping me or just to have a cheap laugh in
front of your Sunday pub friends/hangers on
Click to expand...
I woudl suggest that it was being helpful, especially the comments re-
networking.
 
MickKi said:
[email protected]: [snip]

http://nl.trendmicro-europe.com/enterprise/security_info/ve_detail.php?
VName=WORM_SPYBOT.BK

Google is your friend

Duane :)


already tried that thanks. I have followed thru the instructions but the
virus remains
Click to expand...

I take it that you checked your registry and the affected entries detailed
in the link that Duane kindly suggested are not present in your machine?

Are you running a peer-2-peer on your PC? If yes, you may get re-infected.

Regards,

Mick
--
Click to expand...


Mick, was this an attempt at helping me or just to have a cheap laugh in
front of your Sunday pub friends/hangers on
Click to expand...

Quote from the AV site in the link

Description:
This memory-resident worm propagates via peer-to-peer applications,
specifically Kazaa and Imesh.

So I think he was asking a valid question

Taff..............



www.sounds-pa.com | www.thecomputerworkshop.com
 
Back
Top