Since my new hard disk was installed I have been plagued by the W32.spybot.worm which is in msnmsgrr.exe and servicelog.exe and which Norton cannot delete, inspite of updated files. I am trying to follow the directions on the Symantec site, but am stuck on the registry editing section. To begin with I cannot find a copy of windows backup on my Mesh emergency disk supplied with the disk. Secondly, when I go into the registry I am told to Navigate to the key:
Now, following the paths, none of the files listed are there. There *are* msnmsgrr.exe and servicelog.exe files. Is it OK to delete these files? They are the ones which contain the worm, according to the Norton Virus check. The folder RunOnce does not contain the 'winsock2driver etc'. But I still have the Norton Antivirus window telling me that Norton has detected a virus in c:\windows\system32\msnmsgmgrr.exe. Clicking on OK just makes the window jump to another part of the screen. Is it OK to delete the msnmsgmgrr.exe and servicelog.exe files? Incidentally, the virus does not seem to be passing on to my email contacts or web forums (I hope not!).
This isn't anything to do with the Spybot program which I have instlled, is it? Sheila
Many thanks, everyone. I have had a glorious three days without the shybot worm. I THINK that spybot eventually got rid of it, but it may have been PestPatrol, which I have downloaded and looks good. It seems to work differently from Spybot, but I am not sure. Anyhow, I have marked this thread as resolved.
This thread is now locked and can not be replied to.