Avast WEBforum

Other => Viruses and worms => Topic started by: ronzoil on September 06, 2003, 07:59:29 PM

Title: friend with virus
Post by: ronzoil on September 06, 2003, 07:59:29 PM

I have a friend that has a virus on his machine,he running windows xp   and norton antivirus.

after running a scan norton tells him he has the  winbook32 virus

it will not clean it or fix it.he has also scanned it at kaspersky and is told the same thing.

any ideas  ty Ronzoil

Title: Re:friend with virus
Post by: raman on September 06, 2003, 09:17:57 PM

Hm, seems to be a "wrong" Virusname. What is the exact one?
But anyway he should be able to delete the Virus in Safemode,  IMO he should use Kaspersky for that.

Title: Re:friend with virus
Post by: ronzoil on September 06, 2003, 10:11:32 PM

i think i had it backwards   its bookwin32

Title: Re:friend with virus
Post by: pk on September 06, 2003, 10:22:36 PM

It seems it's again bad virus name (win32 should be prefix in this case), please try to find out the exact name.

Title: Re:friend with virus
Post by: ronzoil on September 07, 2003, 02:31:34 PM

i asked him at work last night and he told me that it comes up bookwin32

Title: Re:friend with virus
Post by: whocares on September 07, 2003, 02:39:46 PM

Hi,
please scan again with avast, KAV & Trend-Scanners (see below) and tell us the full & exact VIRUSname and
the complete & exact path & filename + extension of the infected file:
separately for each scanner  ;)

Title: Re:friend with virus
Post by: raman on September 07, 2003, 02:44:53 PM

Quote from: ronzoil on September 07, 2003, 02:31:34 PM

i asked him at work last night and he told me that it comes up bookwin32

Let him try what "who" suggested, or let him post here by himself! :)

Title: Re:friend with virus
Post by: ronzoil on September 09, 2003, 05:44:59 PM

he told me it called    backdoor winet  

Title: Re:friend with virus
Post by: whocares on September 09, 2003, 05:50:48 PM

That seems to be a Norton/Symantec-Detection:
http://www.avast.com/forum/index.php?board=1;action=display;threadid=1085
 :)

If so:
http://securityresponse.symantec.com/avcenter/venc/data/backdoor.winet.html

Title: Re:friend with virus
Post by: shoreracing on September 09, 2003, 06:54:45 PM

Hi ,
I'm trhe friend with the virus. The full name is Backdoor.net  this is what Norton Antivirus warning  tells me that I have. WHAT TO DO NOW?

Title: Re:friend with virus
Post by: raman on September 09, 2003, 07:17:06 PM

Uh, if it is this one:  http://securityresponse.symantec.com/avcenter/venc/data/backdoor.nettrojan.html
read the description carefully. Removing is a bit tricky for this one.

You can get some more infos here:
http://www.virusbtn.com/resources/vgrep/vgrep.cgi?terms=BackDoor-ANF&product=0 (http://www.virusbtn.com/resources/vgrep/vgrep.cgi?terms=BackDoor-ANF&product=0)

Title: Re:friend with virus
Post by: whocares on September 09, 2003, 10:01:13 PM

Hi shoreracing,

maybe you could decide on a name once and for all ?  ;)

"Backdoor.winet" or "backdoor.net"  ??
(the 2nd one isn't listed in Symantec)

-> then the Symantec-AV-Center will give you all the instructions you need..
or your just reread the postings above..
 ;) ;)