Kona has a BIG problem!
Saturday, August 23, 2003 by kona0197 | Discussion: WinCustomize Talk
Somehow I got that new Worm, Sobig f@mm. Does anyone know how to get rid of it?
Here is what I have tried:
First I tried Norton Virus scanner. It failed to remove it, although Norton has been updated completely.
I then tried the online scan from Trend Micro, otherwise known as PCillin. It detected it but could not remove it because it said the file is in use and can not be deleted.
Then I tried the stinger program from mcaffee but it sees the virus but can not delete it. Again, something about the file can not be deleted because it is in use.
I also updated windows.
This worm is embedded in the C:/_restore/temp files and although I have disabled system restore it still says (any virus program) that it IS in use and can not be deleted.
How do i remove the damn worm?
Do I have to reformat and reinstall?
Thanks from Kona!
Here is what I have tried:
First I tried Norton Virus scanner. It failed to remove it, although Norton has been updated completely.
I then tried the online scan from Trend Micro, otherwise known as PCillin. It detected it but could not remove it because it said the file is in use and can not be deleted.
Then I tried the stinger program from mcaffee but it sees the virus but can not delete it. Again, something about the file can not be deleted because it is in use.
I also updated windows.
This worm is embedded in the C:/_restore/temp files and although I have disabled system restore it still says (any virus program) that it IS in use and can not be deleted.
How do i remove the damn worm?
Do I have to reformat and reinstall?
Thanks from Kona!
yrag2
Reply #2 Saturday, August 23, 2003 3:42 PM
Reply #2 Saturday, August 23, 2003 3:42 PM
Not sure if you have this in Win ME, but ....... in system tools run disk mgr and click on options...in system restore options (at bottom) click on remove all your restores except the last good one.....
Fuzzy Logic
Reply #3 Saturday, August 23, 2003 3:51 PM
Reply #3 Saturday, August 23, 2003 3:51 PM
In ME the easiest way is to set the System Restore cache size to zero 
White_Moth
Reply #4 Saturday, August 23, 2003 3:51 PM
Reply #4 Saturday, August 23, 2003 3:51 PM
Try restarting into "Safe Mode" and run Stinger, but make sure your Restore System Files is turned off.
[Message Edited]
[Message Edited]
sig101
Reply #5 Saturday, August 23, 2003 5:14 PM
Reply #5 Saturday, August 23, 2003 5:14 PM
Sounds like there's a running process that needed to be terminated before it could be removed.
Here's Symantec's site which has links to info and the removal tool for SobigF:
http://symantec.com
Let us know how it goes.
Oh, just wondering, have you rebooted after diabling system restore and then try to remove the worm? I think theoretically the reboot should clear the temp files? Worth a try.
[Message Edited]
Here's Symantec's site which has links to info and the removal tool for SobigF:
http://symantec.com
Let us know how it goes.
Oh, just wondering, have you rebooted after diabling system restore and then try to remove the worm? I think theoretically the reboot should clear the temp files? Worth a try.
[Message Edited]
Ingui
Reply #6 Saturday, August 23, 2003 5:30 PM
Reply #6 Saturday, August 23, 2003 5:30 PM
Yea, like sig said. Have you tried ctrl+alt+del/"TaskMan", then try your scan> to End the process first? Shut down the virus's prog. 1st, then try your scan 
Good luck kona
Good luck kona
kona0197
Reply #7 Saturday, August 23, 2003 5:38 PM
thanks alot for this peice of advice. KNOCKED THAT WORM OUT OF MY SYSTEM!
Thank you everyone.
How is this acomplished?
Reply #7 Saturday, August 23, 2003 5:38 PM
| Kona go to symantec web site and download the fix it's there takes 20 seconds hope this helps...calles fixtool for SobigF |
thanks alot for this peice of advice. KNOCKED THAT WORM OUT OF MY SYSTEM!
Thank you everyone.
| In ME the easiest way is to set the System Restore cache size to zero |
How is this acomplished?
Fuzzy Logic
Reply #9 Sunday, August 24, 2003 1:14 AM
Reply #9 Sunday, August 24, 2003 1:14 AM
To set the System Restore cache size in ME:
Select Start > Settings > Control Panel > System
Select the Performance tab
Click the File System button
On the Hard Disk tab, adjust the System Restore disk space use slider to the preferred size
Select Start > Settings > Control Panel > System
Select the Performance tab
Click the File System button
On the Hard Disk tab, adjust the System Restore disk space use slider to the preferred size
kona0197
Reply #10 Sunday, August 24, 2003 7:23 AM
Reply #10 Sunday, August 24, 2003 7:23 AM
thx again guys. But I tell ya next time (if there is a next time) I get a worm I am going to reformat and use mandrake/win 98....
MadIce
Reply #11 Sunday, August 24, 2003 7:32 AM
Reply #11 Sunday, August 24, 2003 7:32 AM
Don't think these are free from virii, worms, spam, bugs and/or security issues, but I can imagine you have enough of it.
kona0197
Reply #12 Sunday, August 24, 2003 7:34 AM
Reply #12 Sunday, August 24, 2003 7:34 AM
no it is the fact that 98 would run better on my 233 laptop and as far as mandrake... well i just want to play around with that. I have ME right know and the bugs in it are getting to me.
nice to see you madice.
nice to see you madice.
Please login to comment and/or vote for this skin.
Welcome Guest! Please take the time to register with us.
There are many great features available to you once you register, including:
- Richer content, access to many features that are disabled for guests like commenting on the forums and downloading skins.
- Access to a great community, with a massive database of many, many areas of interest.
- Access to contests & subscription offers like exclusive emails.
- It's simple, and FREE!
Reply #1 Saturday, August 23, 2003 3:28 PM