|
Korean Job Discussion Forums "The Internet's Meeting Place for ESL/EFL Teachers from Around the World!"
|
View previous topic :: View next topic |
Author |
Message |
The Den
Joined: 26 Jan 2003
|
Posted: Wed Nov 12, 2003 8:07 pm Post subject: Computer virus problem |
|
|
My computer is currently infected with W32.KWbot.D.Worm. I have scanned my computer with Norton Anti virus. When the scan completes it shows all the files that are infected then quarantines them. afterward I go in and delete them. However afterward Norton says that there is still a virus on the computer and that the quarantine attempt failed. Then delete failed. I have gone to the internet virus encyclopedia and read the info on this virus and followed the instructions to update the registry. Afterward I ran the scan again and this worm keeps coming up. Any ideas on how to get rid of it. I have already run Liveupdate. |
|
Back to top |
|
|
jaebea
Joined: 21 Sep 2003 Location: SYD
|
Posted: Wed Nov 12, 2003 9:08 pm Post subject: |
|
|
Here is a thorough walkthrough from Symantec, the mob who make Norton Anti Virus...
http://securityresponse.symantec.com/avcenter/venc/data/w32.kwbot.d.w
orm.html
It's one of those nasty worms that hide in your Windows directory and embed themselves in the registry (the "place" where Windows knows how everything is interconnected). It might seem intimidating, but if you follow the instructions carefully, you shouldn't have a problem.
Feel free to ask if you need any help.
jae. |
|
Back to top |
|
|
SuperFly
Joined: 09 Jul 2003 Location: In the doghouse
|
Posted: Wed Nov 12, 2003 10:18 pm Post subject: |
|
|
Another good one:
http://www.grisoft.com/us/us_vir_tt.php
http://www.grisoft.com/us/us_ts_removers.php
Quote: |
Specialized Utilities for Virus Removal and Handbooks for Manual Virus Removal
There is the list of specialized utilities for virus removal. The utilities can be used for romoving of some types of viruses, commonly most spread. The list is updated on regulary basis.
The warning about actual possible virus infection can be found at the page Virus Top Threats, the complete description of virus properties, the ways for the virus infection and possible corruption of your datas can be found in virus database.
The list of single purposes removers utilities
Win32/Valla.2048
I-Worm/Bugbear
Win32/Dupator
Win32/Elkern
I-Worm/Ganda
VBS/Iloveyou
I-Worm/Lovgate.C
I-Worm/Navidad
I-Worm/Nimda
I-Worm/Pretty_Park
I-Worm/Sircam.A
I-Worm/Happy99
W95/Space.1445
I-Worm/Verona.B
I-Worm/Swen
The list of Handbooks for Manual Virus Removal
I-Worm/Sober.A
Worm/Lovsan
|
http://securityresponse.symantec.com/avcenter/venc/data/w32.kwbot.d.worm.html
Quote: |
W32.Kwbot.D.Worm
Discovered on: February 17, 2003
Last Updated on: February 18, 2003 02:35:51 PM
W32.Kwbot.D.Worm is a variant of W32.Kwbot.C.Worm, with the following differences:
This variant was packed using a run-time compression utility.
The file name has been changed to Winsys.exe.
The registry entry is named Winsys.
Everything else, including the functionality, remains the same as the W32.Kwbot.C.Worm. For additional information, read the W32.Kwbot.C.Worm writeup.
Type: Worm
Infection Length: 102,200 Bytes
Systems Affected: Windows 95, Windows 98, Windows NT, Windows 2000, Windows XP, Windows Me
Systems Not Affected: Windows 3.x, Microsoft IIS, Macintosh, OS/2, UNIX, Linux |
Here is a great site for detecting spyware and the like...
www.pestscan.com |
|
Back to top |
|
|
|
|
You cannot post new topics in this forum You cannot reply to topics in this forum You cannot edit your posts in this forum You cannot delete your posts in this forum You cannot vote in polls in this forum
|
|