virus help / backdoor.sbot

[fitfella29]

just installed norton 2003 and it keeps coming up with this virus/trojan but it cant delete it or fix it for me.

i ran a scan with a program called "the cleaner" but that came back clean.

is there anyway i can get rid of this thing or check that i actually do have it?

thanks in advance.

 

[Enyo]

Norton will remove it automatically for you if you do a full system scan.

Otherwise you need to identify its process name and remove it per the instructions on:

http://securityresponse.symantec.com/avcenter/venc/data/backdoor.sdbot.html

 

[fitfella29]

norton keeps keeps saying its unable to repair this file.

 

[Enyo]

Originally posted by fitfella29
norton keeps keeps saying its unable to repair this file.

Yup it will say unable to repair this file / access is denied with the auto-protect dialogue but the main scanner should be able to remove it.

Note the name of the exe it reports as infected then open task manager and find the process name (the exe file). Right click the process and click end process.

Now scan with norton and it will delete it.

 

[fitfella29]

sorted,thanks.

 

[Enyo]

No problem

 

[fitfella29]

i keep getting a popup when i start windows saying that system32 cant be found??

 

[Enyo]

Yea you need to remove the run entry that SDBOT added.

To do so run "msconfig" and head over to the startup tab, you will see it listed there, just remove the check next to it.

Either that or edit the registry as described in the article linked above.