Forum Home
Press F1
 
Thread ID: 48620 2004-08-28 04:37:00 Winbot??? sloanie (3963) Press F1
Post ID Timestamp Content User
266233 2004-08-28 04:37:00 G'day

Ran Norton Antivirus, has come up with finding a virus . . . . . winbot . exe in the windows/system folder . . . I've got 98 so I can't end the program to delete it . . . I mean I can ctrl + alt + del it but I still cant delete the SOB . . . every time I remove the key from the registry it comes back . . . . It plays with the internet connection and sometimes sites dont work and you have to refresh a thousand times or so .

No matter how hard I look, I can find nothing to do with a virus using winbot . exe as a program . . . . . help!

Daniel
sloanie (3963)
266234 2004-08-28 04:42:00 nortons will normally fix the virus, delete it or quarrentine it. what is nortons name for the virus ? tweak'e (174)
266235 2004-08-28 04:54:00 W32.spybot.worm

Doesnt quarentine or delete it for some reason.
sloanie (3963)
266236 2004-08-28 04:56:00 Cannot find anything on the net concerning winbot, apart from references to IRC.

Sounds a bit like a generic name Nortons has given it. Which means that it is more likely to be spyware. Maybe try downloading, updating and running Spybot (www.majorgeeks.com) and Adaware (www.majorgeeks.com) to see if they find and clean the swine.

Another tool to try is an online scan here (housecall.antivirus.com)
Pheonix (280)
266237 2004-08-28 05:04:00 Have adaware, will try the others. Thanks for the response. sloanie (3963)
266238 2004-08-28 05:24:00 removal instructions here (securityresponse.symantec.com) tweak'e (174)
266239 2004-08-28 05:32:00 For future reference the forum has a Spyware FAQ here (pressf1.pcworld.co.nz) that can help with this sort of problem. The FAQ section can be reached from the link at the top right of this page. Many of the FAQs have recently been updated. tommy (2826)
1