w32.spybot.worm cure found!!!

[enigma85ppf]

read on.....

using norton anti-virus, smantec... w32.spybot.worm detected-repaired-deleted

reboot it's still there....

spawn file's of the worm that have been found "b.exe" , "csrrs.exe"

using safe mode,

enter folder C:\Documents and Settings\All Users\Start Menu\Programs\Startup


culprit file to delete is named "svchost.exe"

if you look at the propertie's of the file and match up the day your pc was infected you'll see that it is a match... or atleast i did.....


delette this file and reboot in normal mode, the anti-virus of your pref. should run through with no problem's...


probly want to run a reg fix after just incase the anti virus missed anything...

i'm running with a window's xp if anyone has this same problem...

thanx yall,


peace

 

[pechenegs]

you need to inform users that the "svchost.exe" file is also a legitimate file in windows and the legitimate copy resides in the

c:\windows\system32\svchost.exe.

If you do not inform users then some people will accidentally delete the legitimate Windows file!

Member of ASAP Alliance of Security Analysis Professionals

under the name khazars