virus help / backdoor.sbot

Discussion in 'Windows Desktop Systems' started by fitfella29, Sep 29, 2003.

  1. fitfella29

    fitfella29 Guest

    just installed norton 2003 and it keeps coming up with this virus/trojan but it cant delete it or fix it for me.

    i ran a scan with a program called "the cleaner" but that came back clean.

    is there anyway i can get rid of this thing or check that i actually do have it?

    thanks in advance.
     
  2. Enyo

    Enyo Moderator

    Messages:
    1,338
  3. fitfella29

    fitfella29 Guest

    norton keeps keeps saying its unable to repair this file.
     
  4. Enyo

    Enyo Moderator

    Messages:
    1,338
    Yup it will say unable to repair this file / access is denied with the auto-protect dialogue but the main scanner should be able to remove it.

    Note the name of the exe it reports as infected then open task manager and find the process name (the exe file). Right click the process and click end process.

    Now scan with norton and it will delete it.
     
  5. fitfella29

    fitfella29 Guest

    sorted,thanks.
     
  6. Enyo

    Enyo Moderator

    Messages:
    1,338
    No problem :)
     
  7. fitfella29

    fitfella29 Guest

    i keep getting a popup when i start windows saying that system32 cant be found??
     
  8. Enyo

    Enyo Moderator

    Messages:
    1,338
    Yea you need to remove the run entry that SDBOT added.

    To do so run "msconfig" and head over to the startup tab, you will see it listed there, just remove the check next to it.

    Either that or edit the registry as described in the article linked above.