Argh!

[Bad^Hat]

Help! I have a virus!

I've already downloaded and run the Blaster Worm fix from Windows Update which I originally thought it was. With Norton 2002 w/ Liveupdates it will find the infected file - C:\WINNT\system32\WINSVC.EXE - But cannot repair, quarantine or delete it. It's giving me a virus alert every five seconds and things will randomly stop working, ie the internet >_<

HELP!!!

 

[RandomPING]

Here's some info i found from a quick search,
http://www.sophos.com/virusinfo/analyses/w32sdboto.html
W3/Sdbot
It has information and removal instructions.

Or maybe it's this one...
http://us.mcafee.com/virusInfo/default.asp?id=description&virus_k=99237
The Klez Virus

Probably the Klez virus, it's more popular, have you tried running virus scan on your startup before windows loads?

 

[Bad^Hat]

Probably the Klez virus, it's more popular, have you tried running virus scan on your startup before windows loads?

Thanks, this gonna sound dumb but, how? ^_^;

 

[simmo]

Before you edit the registry, you should make a backup. On the 'Registry' menu, click 'Export Registry File'. In the 'Export range' panel, click 'All', then save your registry as Backup.

Locate the HKEY_LOCAL_MACHINE entries:

HKLM\Software\Microsoft\Windows\CurrentVersion\Run
\Generic Host Process for Win32 Services
= C:\<Windows system>\winsvc.exe

HKLM\Software\Microsoft\Windows\CurrentVersion\RunServices
\Generic Host Process for Win32 Services
=C:\<Windows system>\winsvc.exe

and delete them if they exist.

Close the registry editor.


easy

 

[ComradeBadger]

I really don't advise messing with the registry. Remember HafLife2.net is not responsible for ANY damage occured following instructions on this site. You're on your own.

 

[RandomPING]

Mr Badger, you mean is NOT responseable
Oh yea, i didn't read the instructions too deeply, if you don't know about your registry, don't go skrewing with it if you can avoid it. Try seeing if you can find a way to get the virus scanner to run before windows loads all the programs. Also if it's in the active memmory try to end the task before you run the virus scanner. Sometimes it can't clean something while it's active.

 

[ComradeBadger]

Tralalalaa

SILENCE PEON

And RandomPING has most likely fixed your problem

 

[Jammydodger]

Have you tryed a system restore yet?

 

[RandomPING]

Tralalalaa

SILENCE PEON

And RandomPING has most likely fixed your problem

God i hope so, cause that gold isn't going to mine itself.
::gets back to work::

 

[Bad^Hat]

Looks like I've fixed it. Thanks again guys