Service Pack Question...HELP!

[smccammon]

I am working on some infected pc's with the w32.spybot.worm. Two machines are connected to devices that cannot be ran with service pack 4 and service pack 2 is installed. However the fix we have for the machines including the other machines w/o the devices the fix requires service pack 4 to be installed. Now is there any way around this or any way to remove this worm. The worm has disabled our anti-virus software (symantec). Thanks

 

[jimp56]

you'll get a better answer here:

http://www.tek-tips.com/threadminder.cfm?pid=760

But I would start by seeing if you can get any online web-based scanners to run.

Scanners such as:

http://housecall.trendmicro.com

 

[funk45]

in my limited experience with sort of situation, i.e. norton is disabled, I have to assume that worms and viruses target norton because it is the most widly used. I have had success with installing AVG free edition and running that. I've run AVG free for 6 years on my machine and only been bitten once...pretty good app.

http://free.grisoft.com/doc/1

If you must go deep try using hijackthis, you'll be able to kill the reg key, after some hunting. Don't know how deep your knowledge goes, but make sure you delete the right key, they don't go to the recycle bin.

http://www.download.com/HijackThis/3000-8022_4-10227353.html

I've also used reglite, which shows active keys as they are initiated, there is an option to watch them scroll across the screen in real time...I've found it quite helpful.

http://www.resplendence.com/reglite

Good luck!!