Problem removing Spybot.Worm

[AntonH]

Ran a few different virus scans with different results.
Spybot S&D and ADaware both passed over the entry, but
Norton AV and Norton Personal Firewall both
located/detected worm infecting ntfsckd.exe file. File is
loaded at startup from the registry. I have used MS
Antispywre to block atfsckd.exe from changing the
registry value and am concerned that 'resident' window
keeps informing me that it is continually having to block
this attemped registry change. Is it the system or the
worm file that is trying to make this change to the
global startup entry? How can I remove this worm?

 

[Mikolaj]

Ran a few different virus scans with different results.

Spybot S&D and ADaware both passed over the entry, but
Norton AV and Norton Personal Firewall both
located/detected worm infecting ntfsckd.exe file. File is
loaded at startup from the registry. I have used MS
Antispywre to block atfsckd.exe from changing the
registry value and am concerned that 'resident' window
keeps informing me that it is continually having to block
this attemped registry change. Is it the system or the
worm file that is trying to make this change to the
global startup entry? How can I remove this worm?

Have you tried to remove it in system's Safe mode (F8 during startup)?

 

[Ron Chamberlin]

Hi Anton,
Spybot.worm, if that's the right name, can be very damaging to your machine
and, depending on the flavor of it, your personal information. Go to
http://www.trendmicro.com, and run a free, full av scan from there.

Ron Chamberlin
MS-MVP