Forum Home
Press F1
 
Thread ID: 35075 2003-07-01 12:13:00 virus... W32/Kwbot.Gen hammer (1735) Press F1
Post ID Timestamp Content User
156753 2003-07-01 12:13:00 have had virus.. disenfected...now whenever i turn on PC.. it connects to internet... I have run msconfig... and removed everything that uses the internet... but everytime i uncheck CMD.32.exe... it checks itself back on after a restart.... I think this is my problem but don't know what to do about it. hammer (1735)
156754 2003-07-01 12:26:00 While you say "disinfected" it plainly isn't!

You will likely need to remove some registry entries, full description is found here (securityresponse.symantec.com)

The worm will have put other files in the system that are re-activating via the registry every reboot.
godfather (25)
156755 2003-07-01 12:44:00 yeah... i realise i still have problems... i have the list of some of the files this virus creates in windows directory but i haven't the knowlege of where to go and how to delete them... help.... hammer (1735)
156756 2003-07-01 12:56:00 Well the full instructions are in the link I gave, but if you are not comfortable editing the Registry, you will need to take it to someone, or get someone in?

Just be careful NOT to use any P2P applications until its clean or you will infect others. Thats probably how you got it?
godfather (25)
156757 2003-07-01 13:22:00 OK... thanks for your help.... hammer (1735)
156758 2003-07-01 13:58:00 What OS are you using. The Trend Micro site has additional cleaniing instructions for Win ME & XP here are their links here (www.trendmicro.com) and here (www.trendmicro.com)

HTH Murray P
Murray P (44)
1