topic Re: W32.KOOBFACE.B VIRUS in Norton Internet Security / Norton AntiVirus

W32.KOOBFACE.B VIRUS

merson10 — Mon, 13 Oct 2008 08:09:59 GMT

Hi,

I'm no computer expert and really need some help removing this virus. I have followed the steps from Norton on how to remove the virus. Every time I reboot and run a new scan the virus is still getting picked up. I also ran the scan in safe mode for which the virus was not there. I tried to uninstall and reinstall my Norton Security but was unable to find any information on the order history of my purchasing the product for which I renewed in the New Year on line, even though I have close to 140 days subscription left.

I'm a little lost no. Is the virus still on my PC? Is there a problem with my internet Security?

Help please!

Andy

Re: W32.KOOBFACE.B VIRUS

jAW — Mon, 13 Oct 2008 08:52:40 GMT

Hi,

What I would like to know first is the exact file(s) that Norton has detected and where they are located. You can find this information in the details of the threats, either in the scan results or by viewing the history log.

Secondly, you said you tried to reinstall Norton. Do you have it installed right now, and if so, what version is it?

jAW

Re: W32.KOOBFACE.B VIRUS

merson10 — Mon, 13 Oct 2008 09:36:21 GMT

Hi,

At my work at the moment so don't have the exact files to hand but they were some thing like c:\windows\fmtarbk.dat and c:\windows\445678844.dat but will reconfirm once at home.

I do have the Norton currently running on my pc, I renewed my subscriptin back around Feb this year so would assume it was either 2007 or 2008 version. I thought about trying to reinstall it as there was no virus picked up when I ran the scan in safe mode. I also tried to install the new 2009 version that was offered to my by norton but the system caould not install it.

Thanks

Andy

Re: W32.KOOBFACE.B VIRUS

Stu — Mon, 13 Oct 2008 09:42:11 GMT

You should try again when you get home. Please try following steps:

remove the current version from your machine
install v2009
Than please disable system restore
run a full scan

Re: W32.KOOBFACE.B VIRUS

merson10 — Mon, 13 Oct 2008 09:48:28 GMT

I will give that ago. Silly question, once I remove the current version I have, where do I get the 2009 version from and will I be charged for it? Also, do you thin the virus has already been removed but it's not correctly showing this is my current version?

Re: W32.KOOBFACE.B VIRUS

Stu — Mon, 13 Oct 2008 10:01:05 GMT

If you have a valid license it is free of charge. Upgrade to v2009

I'm not sure if it is gone. We have to just have a look after your first scan with v2009

Re: W32.KOOBFACE.B VIRUS

merson10 — Mon, 13 Oct 2008 10:06:50 GMT

Thanks for your help, will give it ago tonight.

Re: W32.KOOBFACE.B VIRUS

merson10 — Tue, 14 Oct 2008 08:42:15 GMT

Hi,

I ran through the process last night of uninstalling my old norton and installing v2009. Ran a full system scan with the auto restore turned off. Nothing came up on the scan, so would I be correct in assuming the virus has been deleted and my pc is safe?

Thanks

Andy

Re: W32.KOOBFACE.B VIRUS

Stu — Tue, 14 Oct 2008 08:49:41 GMT

Yep, It sounds like it is gone. Well done

Re: W32.KOOBFACE.B VIRUS

jAW — Tue, 14 Oct 2008 08:52:49 GMT

Hi,

Most likely it is gone. I would just like to make sure that you ran LiveUpdate until no more updates were available before the scan. The definitions that the 09 products come shipped with should include Koobface.B, but it's a relatively new threat (August) so I cannot say for sure.

jAW

Re: W32.KOOBFACE.B VIRUS

merson10 — Tue, 14 Oct 2008 08:54:15 GMT

Thanks for your help, very much appricated.

Re: W32.KOOBFACE.B VIRUS

Stu — Tue, 14 Oct 2008 09:17:49 GMT

You're welcome