how to remove w32.spybot.worm

the niner nation wrote:
> Hi..i am running norton 2003 and it wont delete or quarantine this
> virus, win32.spybot.worm just says its detected. can anyone please
> reccomend how to remove it??
> thanks in advance!

If you are running WinME then you need to turn off System Restore. Go to
Start >> Help and look for it. Reboot, run the scan and turn System Restore
when clean.
 >> Stay informed about: how to remove w32.spybot.worm 

On Fri, 21 Nov 2003 13:36:47 GMT, "YoKenny" <YKnot.TakeThisOut@home.invalid>
wrote:

>the niner nation wrote:
>> Hi..i am running norton 2003 and it wont delete or quarantine this
>> virus, win32.spybot.worm just says its detected. can anyone please
>> reccomend how to remove it??
>> thanks in advance!

I just had the same problem and first tried to remove the files using
Norton. .Didn't work. I then tried editing the registry but the
registry wasn't acsessable.
I then switched to Safe Mode and looked for the information to change
in the registry but couldn't find it.
Then also in Safe Mode I had no problem deleting the files that Norton
couldn't delete under Normal operation.

The files causing the problem were;
C:\WINDOWS\system32\svshost.exe is infected with Backdoor.SDBot.Gen
C:\WINDOWS\system32\zonealarm.exe is infected with W32.Spybot.Worm

They recommend to disable the System Restore to prevent the system to
be restored with the virus if they are in the registry.
In my case they weren't .

I have scanned the computer with the latest Norton Anti Virus
information and also remotely controlled by the Norton site and found
no problems.

Hope it helps

Vlad
>
>If you are running WinME then you need to turn off System Restore. Go to
>Start >> Help and look for it. Reboot, run the scan and turn System Restore
>when clean.
 >> Stay informed about: how to remove w32.spybot.worm 

As has been detected you know where to find it on your drive. Bootup using
safe mode and DOS. This way Windows will not activate the file which is why
you are not able to delete it. One you located the file in DOS you can
delete it with the DOS command DEL name_of_file


"Vlad" <Vlad.TakeThisOut@Vla.com> wrote in message
news:9foj80l5b09mfvsk5kr9ot6cmlfvst0s54@4ax.com...
> On Fri, 21 Nov 2003 13:36:47 GMT, "YoKenny" <YKnot.TakeThisOut@home.invalid>
> wrote:
>
> >the niner nation wrote:
> >> Hi..i am running norton 2003 and it wont delete or quarantine this
> >> virus, win32.spybot.worm just says its detected. can anyone please
> >> reccomend how to remove it??
> >> thanks in advance!
>
> I just had the same problem and first tried to remove the files using
> Norton. .Didn't work. I then tried editing the registry but the
> registry wasn't acsessable.
> I then switched to Safe Mode and looked for the information to change
> in the registry but couldn't find it.
> Then also in Safe Mode I had no problem deleting the files that Norton
> couldn't delete under Normal operation.
>
> The files causing the problem were;
> C:\WINDOWS\system32\svshost.exe is infected with Backdoor.SDBot.Gen
> C:\WINDOWS\system32\zonealarm.exe is infected with W32.Spybot.Worm
>
> They recommend to disable the System Restore to prevent the system to
> be restored with the virus if they are in the registry.
> In my case they weren't .
>
> I have scanned the computer with the latest Norton Anti Virus
> information and also remotely controlled by the Norton site and found
> no problems.
>
> Hope it helps
>
> Vlad
> >
> >If you are running WinME then you need to turn off System Restore. Go
to
> >Start >> Help and look for it. Reboot, run the scan and turn System
Restore
> >when clean.
>
 >> Stay informed about: how to remove w32.spybot.worm