Virus removal help requested -- Trojan.Bat.Noshare.K

[Stiks]

My Operating System is Windows 2000 Service Pack 4.

Below are the results of an online scan I did at BitDefender website. I
don't understand the results because it told me that one of the files could
not be disinfected or deleted but the other page seems to have deleted
something. When I run the scan again, I get the same results...same virus.
Can anyone tell me what this virus is and how I can get rid of it? I cannot
find it in BitDefender's list of removal tools.


BitDefender Online Scanner
Scan report generated at: Tue, Aug 30, 2005 - 21:29:43

Scan path: A:\;C:\;D:\;E:\;

Statistics
Time00:22:25
Files72171
Folders1216
Boot Sectors2
Archives621
Packed Files9883

Results
Identified Viruses 1
Infected Files 1
Suspect Files 0
Warnings0
Disinfected0
Deleted Files1

Engines Info
Virus Definitions203100
Engine buildAVCORE v1.0 (build 2292) (i386) (Mar 3 2005 11:57:29)
Scan plugins13
Archive plugins39
Unpack plugins4
E-mail plugins6
System plugins1

Scan Settings
First ActionDisinfect
Second ActionDelete
HeuristicsYes
Enable WarningsYes
Scanned
Extensionsexe;com;dll;ocx;scr;bin;dat;386;vxd;sys;wdm;cla;class;ovl;ole;hlp;
doc;dot;xls;ppt;wbk;wiz;pot;ppa;xla;xlt;vbs;vbe;mdb;rtf;htm;hta;html;xml;xtp
;php;asp;js;shs;chm;lnk;pif;prc;url;smm;pfd;msi;ini;csc;cmd;bas;
Exclude Extensions
Scan EmailsYes
Scan ArchivesYes
Scan PackedYes
Scan FilesYes
Scan BootYes

Scanned File Status
C:\WINNT\system32\bside\Sbsid3.exe=>(Instyler
o)=>%appfolder%\lock.batInfected with: Trojan.Bat.Noshare.K
C:\WINNT\system32\bside\Sbsid3.exe=>(Instyler
o)=>%appfolder%\lock.batDisinfection failed
C:\WINNT\system32\bside\Sbsid3.exe=>(Instyler
o)=>%appfolder%\lock.batDeleted
C:\WINNT\system32\bside\Sbsid3.exe=>(Instyler o)Update failed

 

[David H. Lipman]

From: "Stiks" <[email protected]>

| My Operating System is Windows 2000 Service Pack 4.
|
| Below are the results of an online scan I did at BitDefender website. I
| don't understand the results because it told me that one of the files could
| not be disinfected or deleted but the other page seems to have deleted
| something. When I run the scan again, I get the same results...same virus.
| Can anyone tell me what this virus is and how I can get rid of it? I cannot
| find it in BitDefender's list of removal tools.
|
| BitDefender Online Scanner
| Scan report generated at: Tue, Aug 30, 2005 - 21:29:43 |


< scan log snipped >

Use the following tool. It provides localized scanners, not online scanners, and can be
used in both Normal Mode and in Safe Mode. Safe Mode is more effective at removing
infectors.

Download MULTI_AV.EXE from the URL --
http://www.ik-cs.com/programs/virtools/Multi_AV.exe

It is a self-extracting ZIP file that contains the Kixtart Script Interpreter {
http://kixtart.org Kixtart is CareWare } three batch files, five Kixtart scripts, one Link
(.LNK) file, a PDF instruction file and two utilities; UNZIP.EXE and WGET.EXE. It will
simplify the process of using; Sophos, Trend and McAfee Anti Virus Command Line Scanners to
remove viruses, Trojans and various other malware.

C:\AV-CLS\StartMenu.BAT -- { or Double-click on 'Start Menu' in C:\AV-CLS}
This will bring up the initial menu of choices and should be executed in Normal Mode. This
way all the components can be downloaded from each AV vendor’s web site.
The choices are; Sophos, Trend, McAfee, Exit the menu and Reboot the PC.

You can choose to go to each menu item and just download the needed files or you can
download the files and perform a scan in Normal Mode. Once you have downloaded the files
needed for each scanner you want to use, you should reboot the PC into Safe Mode [F8 key
during boot] and re-run the menu again and choose which scanner you want to run in Safe
Mode. It is suggested to run the scanners in both Safe Mode and Normal Mode.

When the menu is displayed hitting 'H' or 'h' will bring up a more comprehensive PDF help
file.

To use this utility, perform the following...
Execute; Multi_AV.exe { Note: You must use the default folder C:\AV-CLS }
Choose; Unzip
Choose; Close

Execute; C:\AV-CLS\StartMenu.BAT
{ or Double-click on 'Start Menu' in C:\AV-CLS }

NOTE: You may have to disable your software FireWall or allow WGET.EXE to go through your
FireWall to allow it to download the needed AV vendor related files.

* * * Please report back your results * * *