Thread: Phantom Files
View Single Post
  #4 (permalink)  
Old October 2nd, 2003
Paradog's Avatar
Paradog Paradog is offline
Distinguished Member
 
Join Date: April 5th, 2002
Location: Germoney
Posts: 739
Paradog is flying high
Default

I've done a search, here is the description of your virus.
Actually it has backdoor capabilities, so take care:

http://securityresponse.symantec.com...wbot.worm.html

In case you don't care about that and only want to remove it, here are the removal instructions found on that page. In case you are not using Norton just do it with your AV.

Quote:
Update the virus definitions, restart in Safe mode, and run a full system scan. Delete all files that Norton AntiVirus detects as W32.Kwbot.Worm.
Delete the value

Windows Explorer Update Build 1142

from the following registry keys:

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Curr entVersion\Run
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Curr entVersion\RunServices

And in future always check .exe / .com files before running them
Reply With Quote