Virus help PLEASE!

[hondaman]

I have a problem with a reoccuring w32.spybot_worm.gen. I don't know what
keeps causing it to come back to life. I'm using Mcafee and it detects the
virus and prompts me to have it deleted but it somehow keeps reoccuring and
system restore is disabled. I know it may be a registry key that somehow got
added to my registry. I tried going by norton's and mcafee's websites to
find specific registry keys that may have been modified but I'm coming up
with nothing. If someone knows of a fix or anything that can eliminate this
worm from reproducing files like one named open_me.exe I'd appreciate your
help.

Thanks, Jeff

 

[Lou]

-----Original Message-----
I have a problem with a reoccuring w32.spybot_worm.gen. I don't know what
keeps causing it to come back to life. I'm using Mcafee and it detects the
virus and prompts me to have it deleted but it somehow keeps reoccuring and
system restore is disabled. I know it may be a registry key that somehow got
added to my registry. I tried going by norton's and mcafee's websites to
find specific registry keys that may have been modified but I'm coming up
with nothing. If someone knows of a fix or anything that can eliminate this
worm from reproducing files like one named open_me.exe I'd appreciate your
help.

Thanks, Jeff


.
You might check out help files for spybot but one of the

ways it protects you from spyware is to create files of
same name but will not execute I know there was a similar
problem with alexa between spybot and lavasoft programs.
Offhand you may not have a real problem just a preceived
problem by McAfee. Hope this helps.

 

[hondaman]

No..the file that the spybotworm is creating is open_me.exe and it keeps
recreating the file. it must be a modified registry key. i just wonder what
it is

 

[davetest]

No..the file that the spybotworm is creating is open_me.exe and it keeps
recreating the file. it must be a modified registry key. i just wonder what
it is

It must be either something that starts up during the boot OR
something that starts as a part of an app.
Check your startup options in msconfig, make sure you know what's
what.
Scan the system for virus, trojans and spyware.
Once the system is clear, keep an eye on what you run and you might
be able to figure out what is bringing it back.
I suppose it could be an ie6 BHO, but I think something like
ad-aware of Spybot S&D would find that.

Dave

 

[Lou]

-----Original Message-----
I have a problem with a reoccuring w32.spybot_worm.gen. I don't know what
keeps causing it to come back to life. I'm using Mcafee and it detects the
virus and prompts me to have it deleted but it somehow keeps reoccuring and
system restore is disabled. I know it may be a registry key that somehow got
added to my registry. I tried going by norton's and mcafee's websites to
find specific registry keys that may have been modified but I'm coming up
with nothing. If someone knows of a fix or anything that can eliminate this
worm from reproducing files like one named open_me.exe I'd appreciate your
help.

Thanks, Jeff


.
Other spyware programs find spies in spybots s-d

directory! Please look at the path where such a program
found the spyware. As spybot s-d has no spyware
intergrated, this must be a false alarm. The reason for
such a false alarm is simple: spybot s-d saves backups of
the problems you have fixed; to make it possible to
recover them in case something stop working after the fix.
If the file found is in the recovery directory inside the
spybot s-d directory, it is such a backup. it is no longer
of any harm there, as the file won't be found and loaded
from there. But once you are sure you don't need the
backup,go to the recovery section inside spybot s-d and
purge that file. You may also upgrade spybot s-d version
0.95 or newer; these versions compress the recovery files
into zip archives, thus avoiding other spyware
applications will give false alarms.
( This is from help files and I believe you need to be in
advanced mode to use recovery. Hope this helps)

 

[John Dingley]

Did you check on your AV site about how to remove this properly? Just
deleting it is sometimes not enough.

 

[John Coode]

I have a problem with a reoccuring w32.spybot_worm.gen. I don't know what
keeps causing it to come back to life. I'm using Mcafee and it detects the
virus and prompts me to have it deleted but it somehow keeps reoccuring and
system restore is disabled. I know it may be a registry key that somehow got
added to my registry. I tried going by norton's and mcafee's websites to
find specific registry keys that may have been modified but I'm coming up
with nothing. If someone knows of a fix or anything that can eliminate this
worm from reproducing files like one named open_me.exe I'd appreciate your
help.

Thanks, Jeff

http://www.trendmicro.com/vinfo/virusencyclo/default5.asp?VName=WORM_SPYBOT.GEN#solution