Reply
Visitor
merson10
Posts: 9
Registered: ‎10-13-2008

W32.KOOBFACE.B VIRUS

Hi,

 

I'm no computer expert and really need some help removing this virus.  I have followed the steps from Norton on how to remove the virus.  Every time I reboot and run a new scan the virus is still getting picked up.  I also ran the scan in safe mode for which the virus was not there.  I tried to uninstall and reinstall my Norton Security but was unable to find any information on the order history of my purchasing the product for which I renewed in the New Year on line, even though I have close to 140 days subscription left.   

 

I'm a little lost no.  Is the virus still on my PC?  Is there a problem with my internet Security?

 

Help please!

 

Andy

Super Spyware Scolder
jAW
Posts: 172
Registered: ‎05-19-2008

Re: W32.KOOBFACE.B VIRUS

Hi,

 

What I would like to know first is the exact file(s) that Norton has detected and where they are located. You can find this information in the details of the threats, either in the scan results or by viewing the history log.

 

Secondly, you said you tried to reinstall Norton. Do you have it installed right now, and if so, what version is it?

 

jAW

 

 

Visitor
merson10
Posts: 9
Registered: ‎10-13-2008

Re: W32.KOOBFACE.B VIRUS

Hi,

 

At my work at the moment so don't have the exact files to hand but they were some thing like c:\windows\fmtarbk.dat and c:\windows\445678844.dat but will reconfirm once at home.

 

I do have the Norton currently running on my pc, I renewed my subscriptin back around Feb this year so would assume it was either 2007 or 2008 version.  I thought about trying to reinstall it as there was no virus picked up when I ran the scan in safe mode.  I also tried to install the new 2009 version that was offered to my by norton but the system caould not install it.

 

Thanks

 

Andy

Stu Rootkit Eradicator
Rootkit Eradicator
Stu
Posts: 5,210
Registered: ‎04-08-2008

Re: W32.KOOBFACE.B VIRUS

You should try again when you get home. Please try following steps:

  • remove the current version from your machine
  • install v2009
  • Than please disable system restore
  • run a full scan
"All that we are is the result of what we have thought"
Visitor
merson10
Posts: 9
Registered: ‎10-13-2008

Re: W32.KOOBFACE.B VIRUS

I will give that ago.  Silly question, once I remove the current version I have, where do I get the 2009 version from and will I be charged for it?  Also, do you thin the virus has already been removed but it's not correctly showing this is my current version?

 

Stu Rootkit Eradicator
Rootkit Eradicator
Stu
Posts: 5,210
Registered: ‎04-08-2008

Re: W32.KOOBFACE.B VIRUS

If you have a valid license it is free of charge. Upgrade to v2009

 

I'm not sure if it is gone. We have to just have a look after your first scan with v2009

"All that we are is the result of what we have thought"
Visitor
merson10
Posts: 9
Registered: ‎10-13-2008

Re: W32.KOOBFACE.B VIRUS

Thanks for your help, will give it ago tonight.
Visitor
merson10
Posts: 9
Registered: ‎10-13-2008

Re: W32.KOOBFACE.B VIRUS

Hi,

 

I ran through the process last night of uninstalling my old norton and installing v2009.  Ran a full system scan with the auto restore turned off.  Nothing came up on the scan, so would I be correct in assuming the virus has been deleted and my pc is safe?

 

Thanks

 

Andy

Stu Rootkit Eradicator
Rootkit Eradicator
Stu
Posts: 5,210
Registered: ‎04-08-2008

Re: W32.KOOBFACE.B VIRUS

Yep, It sounds like it is gone. Well done
"All that we are is the result of what we have thought"
Super Spyware Scolder
jAW
Posts: 172
Registered: ‎05-19-2008

Re: W32.KOOBFACE.B VIRUS

Hi,

 

Most likely it is gone. I would just like to make sure that you ran LiveUpdate until no more updates were available before the scan. The definitions that the 09 products come shipped with should include Koobface.B, but it's a relatively new threat (August) so I cannot say for sure.

 

jAW