W32.SPYBOT.WORM

[StevieB]

I have Norton Antivirus and Norton Personal Firewall.

I keep getting Antivirus Alerts saying a virus has been detected
(W32.spybot.worm) and deleted from my computer.

While this is great (that it is detected and deleted) the alerts are
very annoying as I use my PC for watching DVDs etc.

I have run the recommended removal procedure provided by symantec but
no infected files are found.

Can anyone help? This is a recent phenomenon on my PC.

Many thanks

Steve

 

[The Prophecy]

I have Norton Antivirus and Norton Personal Firewall.

I keep getting Antivirus Alerts saying a virus has been detected
(W32.spybot.worm) and deleted from my computer.

While this is great (that it is detected and deleted) the alerts are
very annoying as I use my PC for watching DVDs etc.

I have run the recommended removal procedure provided by symantec but
no infected files are found.

Can anyone help? This is a recent phenomenon on my PC.

Many thanks

Steve

Try turning off System Restore.

If you are unsure how to do this, see this webpage:

http://www.pchell.com/virus/systemrestore.shtml

 

[Merl Turkin]

Try turning off System Restore.

If you are unsure how to do this, see this webpage:

http://www.pchell.com/virus/systemrestore.shtml

IF that fails ditch Windows and try Knoppix linux.

Google is your friend.

 

[StevieB]

Hi - I did switch off the system restore, updated my virus definitions
and ran a full system scan. No infected files were found.

However, I keep getting Norton alerts that a virus has been found and
successfully deleted.

The files are always in the system folder and start TFTP or similar.

 

[FromTheRafters]

Hi - I did switch off the system restore, updated my virus definitions
and ran a full system scan. No infected files were found.

However, I keep getting Norton alerts that a virus has been found and
successfully deleted.

The files are always in the system folder and start TFTP or similar.

Make sure your Windows OS is fully patched. The TFTP named
files are the result of something being downloaded via TFTP (Trivial
File Tranfer Protocol). When "Blaster" was rampant and someone
got the updated AV def's but neglected to patch their machine, this
type of named file was the file alerted to by the AV (before it was
given the name "msblast.exe" or whatever it was). It looks to me as
if you have a similar situation in that you have the AV but are still
unpatched for an exploit.

 

[StevieB]

Thanks. I have run windows upate and installed Service Pack 1 plus a
variety of security patches etc etc. Now I don't seem prone to the
viruses but my system freezes more often (i seem to recall that this
is why I stopped installing patches).