sblhost.exe virus?

[MuggyB]

Hi,

I'm 99% sure I have a virus, - task manager, regedit, msconfig, wont
start - also my nortons wont start - my firewall says I have insufficient
privileges and my norton virus is disabled and wont restart..
My virus def files are the latest and when I scan system it finds nothing..
can disable the "sblhost.exe" process (by creating a new taskmgr.exe) and
task manger, regedit etc starts no prob . I've removed the sblhost entry
from start up settings in registry yet it comes back.. I've also done a
search in command mode and windows mode for the sblhost.exe file but it cant
be found.. I know its there because when I run it in dos it starts up and
doesn't say "bad command or filename"
I'm now really stuck and cant get rid of it. I also don't understand how it
got there when im using latest virus files and firewall. I done a google
search for sblhost.exe and finds nothing.. Is this a brand new virus
infecting pc's?

TIA


Xp Pro service pack 1, all current critical/security fixes
NAV 2004 definitions dated 28/03/2004
Norton firewall 2004

 

[David H. Lipman]

Please go to one or more of the below online scanners and perform a scan of your platform
then report back your results.

Trend:
http://housecall.antivirus.com
http://housecall.trendmicro.com

McAfee:
http://www.mcafee.com/myapps/mfs/default.asp

Panda:
http://www.pandasoftware.com/activescan/

Symantec:
http://security.symantec.com/

Dave




| Hi,
|
| I'm 99% sure I have a virus, - task manager, regedit, msconfig, wont
| start - also my nortons wont start - my firewall says I have insufficient
| privileges and my norton virus is disabled and wont restart..
| My virus def files are the latest and when I scan system it finds nothing..
| can disable the "sblhost.exe" process (by creating a new taskmgr.exe) and
| task manger, regedit etc starts no prob . I've removed the sblhost entry
| from start up settings in registry yet it comes back.. I've also done a
| search in command mode and windows mode for the sblhost.exe file but it cant
| be found.. I know its there because when I run it in dos it starts up and
| doesn't say "bad command or filename"
| I'm now really stuck and cant get rid of it. I also don't understand how it
| got there when im using latest virus files and firewall. I done a google
| search for sblhost.exe and finds nothing.. Is this a brand new virus
| infecting pc's?
|
| TIA
|
|
| Xp Pro service pack 1, all current critical/security fixes
| NAV 2004 definitions dated 28/03/2004
| Norton firewall 2004
|
|

 

[MuggyB]

Thanx for info, panda checker found the virus and cleaned it. Virus
'appears' to have done no permanent damage. Nortons and the others cant spot
this one, name is:

W32/Spybot.gen.worm

 

[Wim Hamhuis]

Thanx for info, panda checker found the virus and cleaned it. Virus
'appears' to have done no permanent damage. Nortons and the others cant spot
this one, name is:

W32/Spybot.gen.worm

What does it do when it isn't detected i wonder.

Wim