PDA

View Full Version : Winbot???



sloanie
28-08-2004, 04:37 PM
G'day

Ran Norton Antivirus, has come up with finding a virus.....winbot.exe in the windows/system folder...I've got 98 so I can't end the program to delete it...I mean I can ctrl + alt + del it but I still cant delete the SOB...every time I remove the key from the registry it comes back....It plays with the internet connection and sometimes sites dont work and you have to refresh a thousand times or so.

No matter how hard I look, I can find nothing to do with a virus using winbot.exe as a program.....help!

Daniel

tweak\'e
28-08-2004, 04:42 PM
nortons will normally fix the virus, delete it or quarrentine it. what is nortons name for the virus ?

sloanie
28-08-2004, 04:54 PM
W32.spybot.worm

Doesnt quarentine or delete it for some reason.

Pheonix
28-08-2004, 04:56 PM
Cannot find anything on the net concerning winbot, apart from references to IRC.

Sounds a bit like a generic name Nortons has given it. Which means that it is more likely to be spyware. Maybe try downloading, updating and running Spybot (http://www.majorgeeks.com/download2471.html) and Adaware (http://www.majorgeeks.com/download.php?det=506) to see if they find and clean the swine.

Another tool to try is an online scan here (http://housecall.antivirus.com/housecall/start_frame.asp)

sloanie
28-08-2004, 05:04 PM
Have adaware, will try the others. Thanks for the response.

tweak\'e
28-08-2004, 05:24 PM
removal instructions here (http://securityresponse.symantec.com/avcenter/venc/data/w32.spybot.worm.html)

tommy
28-08-2004, 05:32 PM
For future reference the forum has a Spyware FAQ here (http://pressf1.pcworld.co.nz/thread.jsp?forum=1&thread=50621&message=305616) that can help with this sort of problem. The FAQ section can be reached from the link at the top right of this page. Many of the FAQs have recently been updated.