W32.Spybot.worm

Thanks...i already tried doing exatcly those instructions, with system restore off....is there any other way...can i go to DOS, or something like that. I read somewhere that XP does not have a DOS entrance...so i am getting a bit frustrated.

thanks , i;ll stay tuned.
e

Try online scan if manual removal instruction provided by Symantec didn't work.

Housecall - http://housecall.antivirus.com/housecall/start_corp.asp
or Panda ActiveScan - http://www.pandasoftware.es/activescan/activescan-com.asp

It's not like earlier version of OS anymore where users can select to boot to MS-DOS. In Windows XP, you will use Command Prompt.

you need a Trojan remover, to remover a Trojan.

please go to www.moosoft.com and download, install and configure to scan hidden files, 'The Cleaner'.

this is a shareware product, and is free for 30 days.

disable your system restore and scan with the Trojan cleaner.

once you are clean you may want to give some serious thought to a firewall.

you can either buy a hardware firewall in the form of a router or you can download a free software firewall.

if the latter, I would recommend using Kerio Personal Firewall which is a rule based firewall. I have used it for over 2 years, trouble free.

if you decide on this course of action please go to

www.kerio.com and download the version KPF 2.1.5.

please post back with results.

david williams

thanks david , but that did not do it....i did forget to say that i am using XP. Any other ideas?

the message is the red window flagged by Norton Antivirus (2003, professional edition). It states that Open_Me.exe was detected and deleted. However, you should know that this Spybot.worm virus has changed it's file name several times. Another name it used was explorer.exe. I assume that these files by which it appears are self made, and not files to the OS system...

anyway, i will try the newest "stinger" and keep you posted...i'm still open to ideas.

You ran the antivirus program while in safe mode? That should have taken care of it. Start your PC in safe mode and scan all files (not just program files). Check this link for instructions on how to configure NAV for maximum protection.

Have you tried an online scan? http://reviews.cnet.com/5208-6132-0.html?forumID=32&threadID=1313&start=0

We've got two options for the reinfection - there is an infected file on your PC that is using a file extension that your AV program is not scanning or you are getting reinfected via some external means. Are you running a firewall to see if anything is trying to get in or out? If not, try disconnecting from the internet, run your virus scan/delete registry entries (in safe mode) and see if it comes back after a reboot. If not, connect to the internet and see if it comes back.