Author Topic: friend with virus  (Read 8506 times)

0 Members and 1 Guest are viewing this topic.

Offline ronzoil

  • Jr. Member
  • **
  • Posts: 50
  • I'm a llama!
friend with virus
« on: September 06, 2003, 07:59:29 PM »
I have a friend that has a virus on his machine,he running windows xp   and norton antivirus.

after running a scan norton tells him he has the  winbook32 virus

it will not clean it or fix it.he has also scanned it at kaspersky and is told the same thing.

any ideas  ty Ronzoil

Offline raman

  • Avast Evangelist
  • Advanced Poster
  • ***
  • Posts: 1062
Re:friend with virus
« Reply #1 on: September 06, 2003, 09:17:57 PM »
Hm, seems to be a "wrong" Virusname. What is the exact one?
But anyway he should be able to delete the Virus in Safemode,  IMO he should use Kaspersky for that.

MfG Ralf

Offline ronzoil

  • Jr. Member
  • **
  • Posts: 50
  • I'm a llama!
Re:friend with virus
« Reply #2 on: September 06, 2003, 10:11:32 PM »
i think i had it backwards   its bookwin32

Offline pk

  • Avast team
  • Super Poster
  • *
  • Posts: 2085
Re:friend with virus
« Reply #3 on: September 06, 2003, 10:22:36 PM »
It seems it's again bad virus name (win32 should be prefix in this case), please try to find out the exact name.

Offline ronzoil

  • Jr. Member
  • **
  • Posts: 50
  • I'm a llama!
Re:friend with virus
« Reply #4 on: September 07, 2003, 02:31:34 PM »
i asked him at work last night and he told me that it comes up bookwin32

Offline whocares

  • Super Poster
  • ***
  • Posts: 1698
  • I'm not a llama! :-)
Re:friend with virus
« Reply #5 on: September 07, 2003, 02:39:46 PM »
Hi,
please scan again with avast, KAV & Trend-Scanners (see below) and tell us the full & exact VIRUSname and
the complete & exact path & filename + extension of the infected file:
separately for each scanner  ;)

Offline raman

  • Avast Evangelist
  • Advanced Poster
  • ***
  • Posts: 1062
Re:friend with virus
« Reply #6 on: September 07, 2003, 02:44:53 PM »
i asked him at work last night and he told me that it comes up bookwin32

Let him try what "who" suggested, or let him post here by himself! :)
MfG Ralf

Offline ronzoil

  • Jr. Member
  • **
  • Posts: 50
  • I'm a llama!
Re:friend with virus
« Reply #7 on: September 09, 2003, 05:44:59 PM »
he told me it called    backdoor winet  

Offline whocares

  • Super Poster
  • ***
  • Posts: 1698
  • I'm not a llama! :-)
« Last Edit: September 09, 2003, 05:52:24 PM by whocares »

Offline shoreracing

  • Newbie
  • *
  • Posts: 3
  • I'm a llama!
Re:friend with virus
« Reply #9 on: September 09, 2003, 06:54:45 PM »
Hi ,
I'm trhe friend with the virus. The full name is Backdoor.net  this is what Norton Antivirus warning  tells me that I have. WHAT TO DO NOW?

Offline raman

  • Avast Evangelist
  • Advanced Poster
  • ***
  • Posts: 1062
Re:friend with virus
« Reply #10 on: September 09, 2003, 07:17:06 PM »
Uh, if it is this one:  http://securityresponse.symantec.com/avcenter/venc/data/backdoor.nettrojan.html
read the description carefully. Removing is a bit tricky for this one.

You can get some more infos here:
http://www.virusbtn.com/resources/vgrep/vgrep.cgi?terms=BackDoor-ANF&product=0
« Last Edit: September 09, 2003, 07:43:30 PM by raman »
MfG Ralf

Offline whocares

  • Super Poster
  • ***
  • Posts: 1698
  • I'm not a llama! :-)
Re:friend with virus
« Reply #11 on: September 09, 2003, 10:01:13 PM »
Hi shoreracing,

maybe you could decide on a name once and for all ?  ;)

"Backdoor.winet" or "backdoor.net"  ??
(the 2nd one isn't listed in Symantec)

-> then the Symantec-AV-Center will give you all the instructions you need..
or your just reread the postings above..
 ;) ;)