Author Topic: backdoor.sybot problem  (Read 5399 times)

0 Members and 1 Guest are viewing this topic.

hungrylilboy

  • Guest
backdoor.sybot problem
« on: August 07, 2003, 11:53:53 AM »
I am running avast 4 pro and recently ran an online virus scanner on 3 different sites (norton, kasper and another).
They all came up with the fact that I was infected by the trojan backdoor.sybot in the file svshosts.
Avast did not find this or inform me that i was infected. Why not? Is Avast not good enough to find these?
I had to disable system restore and delete the file. Was this the right thing to do?
Advice pls. Also any reasons why avast isnt picking up this trojan. Avast=waste of money?? I hope not

Offline raman

  • Avast Evangelist
  • Advanced Poster
  • ***
  • Posts: 1062
Re:backdoor.sybot problem
« Reply #1 on: August 07, 2003, 12:08:04 PM »
Difficult to say, if you still has that Backdoor, you could send it to Avast and see what they have to say. I think your Avast was up to date?
MfG Ralf

hungrylilboy

  • Guest
Re:backdoor.sybot problem
« Reply #2 on: August 07, 2003, 12:09:11 PM »
no. i deleted it. My Avast is totally upto date

Offline raman

  • Avast Evangelist
  • Advanced Poster
  • ***
  • Posts: 1062
Re:backdoor.sybot problem
« Reply #3 on: August 07, 2003, 12:14:59 PM »
Not all AV-Programms are able to find all VIruses. THis can happen even if you use one of the Programms you mentioned in your first post.
What should i say, sh*t happens! :(
MfG Ralf

hungrylilboy

  • Guest
Re:backdoor.sybot problem
« Reply #4 on: August 07, 2003, 12:17:28 PM »
how come avast just got an award for finding ALL virus ITW then? this isnt a new virus. if u search svshosts on net u will find it is an old program but still around

Offline raman

  • Avast Evangelist
  • Advanced Poster
  • ***
  • Posts: 1062
Re:backdoor.sybot problem
« Reply #5 on: August 07, 2003, 12:49:14 PM »
this isnt a new virus. if u search svshosts on net u will find it is an old program but still around

An old Virus does not mean that it is ITW. And the names SVSHOST and SVHOST are often used by Malware, so it does not look so obviouse like Malware, because WinXP/2000(?) uses a file called SVCHOST. Also there are many Variants of one Malware.
MfG Ralf