Unsolved
This post is more than 5 years old
1 Message
0
2288
February 15th, 2004 17:00
Getting rid of sobig
Hi,
I did a scan and found this
Incident Status Location
W32/Sobig.F Renamed C:\Documents and Settings\Application Data\Opera\Opera7\Mail\storage\mbox4.mbs[your_document_pif.vir]
It says it can not clean it. How do I get rid of this?
Thanks,
mountainwolf
Helio_Nami
1 Message
0
February 15th, 2004 17:00
Delete! Also look at this link.
http://securityresponse.symantec.com/avcenter/venc/data/w32.sobig.f@mm.html
http://securityresponse.symantec.com/avcenter/venc/data/w32.sobig.f@mm.removal.tool.html
ChrisRLG
2 Intern
•
3.9K Posts
0
February 15th, 2004 18:00
------------------------
A post of a hijackthis log for the experts to advise.
http://TomCoyote.org/downloads/HijackThis1977.exe
Important: Create a folder on the C: drive called C:\HJT.
You can do this by going to My Computer (Windows key+e) then double click on C: then right click and select New then Folder and name it HJT.
save HijackThis into this folder. When you run HijackThis from this folder and have it "Fixed checked" it will create a backup file of modifications to use if restore is necessary. Then run, scan, save log, then in notepad copy the FULL log by copy and paste as a reply to this post and an expert with HijackThis Knowldge, will have a go at giving advice. Please note the list of experts names below, very few forum regulars here have had this training.
DO NOT FIX ANYTHING WITH HIJACKTHIS WITHOUT EXPERT ADVICE, most of what it finds you need for normal MS Windows tasks.
Known Spyware HijackThis fighters in DellTalk - If you are, and are not on the list please PM Me.
TomCoyote (of http://tomcoyote.org/forums/index.php fame)
YoKenny (Accredited Expert at TomCoyotes)
baskar1234 (Spyware Classroom Teaching Assistant at TomCoyotes)
ChrisRLG (Spyware Classroom Teaching Assistant at TomCoyotes)
Yellowhammer (In Training at TomCoyotes)
therock247uk (In Training at TomCoyotes)
irelynmisses (In Training at TomCoyotes)
You could also go to one of the more specalist forums where more experts will be able to help.
http://tomcoyote.org/forums/index.php
http://www.net-integration.net/cgi-bin/forum/ikonboard.cgi (Home of Spybot S&D)
http://boards.cexx.org/index.php
Do read the sites FAQ before posting, and advise your problem and what steps you have already done to try to cure your problem.
I, and the other hijack experts mentioned above, are in all those sites (and more) with the same login names. You might get one of us at those sites also to anwser your log, but other experts will also be available.