Help - Search - Members - Calendar
Full Version: W32.spybot.worm
QuickSilverScreen Forum > QSS > Help
scslacker022
Early this morning and again a couple days ago my anitvirus (Norton 360) has caught and quarantined this virus... When I went online this morning (after my computer had been sitting idle overnight) I saw a norton alert saying It stopped an attack and a restart was required... HERE is what norton says about this particular virus... It said it is spread by kazza and mIRC... I've never used kazza and I don't even know what mIRC is...

I have 3 questions...

1) Should I be concerned that I have gotten this twice in a couple days? Could it still be on my computer?

2) Any ideas where it came from? Could it be from one of the host sites that we use? Rapidshare? Somewhere else?

3) If it was from something I downloaded, why was it not picked up when the file was initially scanned?

Thanks...
DaveC
If I were you I'd do a scan just to be sure. But Kazaa is p2p-software, and any other kind of p2p-software can get you this kind of virus too. mIRC = IRC-client IRC = Internet Relay Chat.
scslacker022
I hardly ever use P2P programs, limewire on rare occasions to DL a song that I can't find anywhere else... I never use IRC chat either...

Anyway I did all the routine maintenance, AdAware, CCleaner, Norton scan, disk cleanup, and even a defrag... All seems to be ok...

I just hope that nothing is hiding, in my system just waiting to attack... I consider myself to be a smart surfer so when things like that show up anywhere I get a little paranoid...
SEB
If something is hiding then let Spybot Search and Destroy kick its ass.
scslacker022
Haha... I had that on my old laptop... I totally forgot about loading it onto this one... Thanks for the reminder SEB... smile.gif
nastyros
QUOTE(scslacker022 @ Jan 20 2009, 11:24 AM) *
Early this morning and again a couple days ago my anitvirus (Norton 360) has caught and quarantined this virus... When I went online this morning (after my computer had been sitting idle overnight) I saw a norton alert saying It stopped an attack and a restart was required... HERE is what norton says about this particular virus... It said it is spread by kazza and mIRC... I've never used kazza and I don't even know what mIRC is...

I have 3 questions...

1) Should I be concerned that I have gotten this twice in a couple days? Could it still be on my computer?

2) Any ideas where it came from? Could it be from one of the host sites that we use? Rapidshare? Somewhere else?

3) If it was from something I downloaded, why was it not picked up when the file was initially scanned?

Thanks...



search n destroy w/ updated virii list.
scslacker022
Well except for a few tracking cookies, S&D didn't find anything... For some reason it did identify my desktop shortcut to veoh proxy as a WebDialer... I figure that should not be an issue if I don't delete that...
Mr Big Stuff
QUOTE(scslacker022 @ Jan 21 2009, 12:52 AM) *
Well except for a few tracking cookies, S&D didn't find anything... For some reason it did identify my desktop shortcut to veoh proxy as a WebDialer... I figure that should not be an issue if I don't delete that...


McAfee Avert Stinger
robertb
QUOTE(Mr Big Stuff @ Jan 20 2009, 06:05 PM) *

Yeah i got the same thing and i have tried everything even the stinger and it wont get rid of it
SEB
http://www.computing.net/answers/security/...worm/20233.html

Did you make sure to disable system restore and delete the old system restore files to make sure that is not where the infection is still hiding?
RealGold
QUOTE(SEB @ Jan 20 2009, 02:02 PM) *
If something is hiding then let Spybot Search and Destroy kick its ass.


It was as they say :::
Hunted down and taken out
Thank You For the spybot link
dest2k
fdisk!! that will solve it
robertb
I am scanning my computer with spybot. I really hope this works because i have tried everything. And i even turned off and deleted my old system restore files but i can't get rid of this damn worm
robertb
The worm i have is called the w32 forever worm idk if there is a difference
This is a "lo-fi" version of our main content. To view the full version with more information, formatting and images, please click here.
Invision Power Board © 2001-2010 Invision Power Services, Inc.