how to remove w32.spybot.worm

the niner nation · External Since: Nov 21, 2003 Posts: 1

Hi..i am running norton 2003 and it wont delete or quarantine this virus,
win32.spybot.worm just says its detected. can anyone please reccomend how
to remove it??
thanks in advance!

--
The Voice of the 49ers
www.sf49ers.com
www.KGO810am.com
www.nfl.com

kurt wismer · External Since: Jul 04, 2003 Posts: 1539

the niner nation wrote:
> Hi..i am running norton 2003 and it wont delete or quarantine this virus,
> win32.spybot.worm just says its detected. can anyone please reccomend how
> to remove it??

well, realistically, if nav can detect it then it should be able to do
more - at the very least quarantine it... so the question i would ask
is why doesn't it... perhaps you can provide more diagnostic
information... where on your computer was it detected? did you try
restarting in safe mode and scanning?

--
"hungry people don't stay hungry for long
they get hope from fire and smoke as the weak grow strong
hungry people don't stay hungry for long
they get hope from fire and smoke as they reach for the dawn"

YoKenny · External Since: Sep 18, 2003 Posts: 29

the niner nation wrote:
> Hi..i am running norton 2003 and it wont delete or quarantine this
> virus, win32.spybot.worm just says its detected. can anyone please
> reccomend how to remove it??
> thanks in advance!

If you are running WinME then you need to turn off System Restore. Go to
Start >> Help and look for it. Reboot, run the scan and turn System Restore
when clean.

Vlad · External Since: Apr 24, 2004 Posts: 1

On Fri, 21 Nov 2003 13:36:47 GMT, "YoKenny"
wrote:

>the niner nation wrote:
>> Hi..i am running norton 2003 and it wont delete or quarantine this
>> virus, win32.spybot.worm just says its detected. can anyone please
>> reccomend how to remove it??
>> thanks in advance!

I just had the same problem and first tried to remove the files using
Norton. .Didn't work. I then tried editing the registry but the
registry wasn't acsessable.
I then switched to Safe Mode and looked for the information to change
in the registry but couldn't find it.
Then also in Safe Mode I had no problem deleting the files that Norton
couldn't delete under Normal operation.

The files causing the problem were;
C:\WINDOWS\system32\svshost.exe is infected with Backdoor.SDBot.Gen
C:\WINDOWS\system32\zonealarm.exe is infected with W32.Spybot.Worm

They recommend to disable the System Restore to prevent the system to
be restored with the virus if they are in the registry.
In my case they weren't .

I have scanned the computer with the latest Norton Anti Virus
information and also remotely controlled by the Norton site and found
no problems.

Hope it helps

Vlad
>
>If you are running WinME then you need to turn off System Restore. Go to
>Start >> Help and look for it. Reboot, run the scan and turn System Restore
>when clean.

Dick Johnson · External Since: Apr 27, 2004 Posts: 1

As has been detected you know where to find it on your drive. Bootup using
safe mode and DOS. This way Windows will not activate the file which is why
you are not able to delete it. One you located the file in DOS you can
delete it with the DOS command DEL name_of_file

"Vlad" wrote in message

> On Fri, 21 Nov 2003 13:36:47 GMT, "YoKenny"
> wrote:
>
> >the niner nation wrote:
> >> Hi..i am running norton 2003 and it wont delete or quarantine this
> >> virus, win32.spybot.worm just says its detected. can anyone please
> >> reccomend how to remove it??
> >> thanks in advance!
>
> I just had the same problem and first tried to remove the files using
> Norton. .Didn't work. I then tried editing the registry but the
> registry wasn't acsessable.
> I then switched to Safe Mode and looked for the information to change
> in the registry but couldn't find it.
> Then also in Safe Mode I had no problem deleting the files that Norton
> couldn't delete under Normal operation.
>
> The files causing the problem were;
> C:\WINDOWS\system32\svshost.exe is infected with Backdoor.SDBot.Gen
> C:\WINDOWS\system32\zonealarm.exe is infected with W32.Spybot.Worm
>
> They recommend to disable the System Restore to prevent the system to
> be restored with the virus if they are in the registry.
> In my case they weren't .
>
> I have scanned the computer with the latest Norton Anti Virus
> information and also remotely controlled by the Norton site and found
> no problems.
>
> Hope it helps
>
> Vlad
> >
> >If you are running WinME then you need to turn off System Restore. Go
to
> >Start >> Help and look for it. Reboot, run the scan and turn System
Restore
> >when clean.
>