Virus ??

Hi all!

I have a friend running Windows XP. She has been having trouble, and found this WORM AGOBOT.AC thens says it has infected "C:\WINDOWS\system32\spools ".
I am not familier with XP, and since she is over 2000 miles away, kind of hard for me to look at it...lol.

Also, she said she has no access to her CD-rom drive either.

Is there some easy step by step process I can lead her through?

Thanks in advance for any help you can provide.

mark

 

My guess is she has W32.HLLW.Gaobot.AC (or maybe AG, AE, AO or another variant) and removal instructions are available at the link. It's the Symantec site so talks about using Norton to do the cleaning but given that the worm tries, and may have managed, to disable onboard anti-virus, I think I'd do the cleaning with an online app like Housecall but only after doing the local things to the PC that are recommended at the Symantec link.

That way, whatever the critter is, it should be found and killed and with system restore turned off, when it is gone, it should be really gone rather than lurking about.

What AV software does she run and how often does she update the virus def files?

And if she hasn't already, she really needs to load the DCOM patch - link provided on the Symantec page.

 

Thanks!

I will see how it goes.

She uses Norton AV, but not sure about her updates, and how often it gets scanned.

Thanks again, Mark

PS BTW, great site!