W32.Bookface.B

bluereef

my daughter as been on facebook and opened a link she was sent containing that virus..ive got norton 360 and its done all the scans and says its removed them but when i scanned again i set system restore to off like i was advised and scanned again and ive still got it..can someone tell me how to get rid of it please.

sorry its W32.Koobface.B

shaven-monkey

http://www.411-spyware.com/koobface-b-worm

don't download their scanner, just follow the instructions.
I'm not saying the scanner is good or bad but it's not needed.

Reluctant_spender

Try this free online scan
Please go to Eset Onlinescan (NOD32)
(You need to use InternetExplorer or enable IEView in Firefox)

• You will then see the Terms of Use, tick the check-box infront of YES, I accept the Terms of Use
• Now click Start
• Should you face a Security Warning that asks if you want to install and run a file called "OnlineScanner.cab", click Yes
• Click Start (the Onlinescanner will now prepare itself for running on your pc)
• To do a full-scan, tick: "Remove found threats" and "Scan potentially unwanted applications"
• Press Scan
  The Onlinescan will now start and scan your pc (please let it run to completion)
• When the scan has finished, it will show a screen with two tabs "overview" and "details" and the option to get information or buy software, just close the window
• Click Start >> Run... >> type: C:\Program Files\EsetOnlineScanner\log.txt
  The Scan results will now open in Notepad
• Click into the text area, right-click and chose "select all"
• Right-click again and chose "copy"
• Close Notepad

Note for Vista Users: Eset is compatible but Internet Explorer must be run as Administrator. To do this, right-click on the IE icon in the Start Menu or Quick Launch Bar on the Taskbar and select "Run as Administrator" from the context menu.)

Include this log in your reply by right-clicking and "paste" in the text area of the reply post you just created.

bluereef

was still scanning after 6hrs had to stop it in the end

panicker

I've just had a similar issue with a virus from Facebook although mine was a W32downldr.**** virus which kept re-appearing after a couple of virus scans. I spoke to a techie friend and he told me to just re-boot computer in safe mode and run the virus scan in safe mode, he said w32 virus's attach themselves to windows files which causes a dillema for most anti-virus programs and they end up ignoring them .

This worked perfectly for me and I'm now virus free again...

aliEnRIK

Try MALWAREBYTES
http://www.download.com/Malwarebytes-Anti-Malware/3000-8022_4-10804572.html
UPDATE and QUICK SCAN
Post the log here AFTER youve deleted whatever it finds

bluereef

ive read where the virus attacks its in ur HKEY and changes your reg but ive looked and cant find it anywhere

bluereef

malware is spydoctor in order for it to delete ur files not 100% you have to pay

GunJack

bluereef wrote: »

malware is spydoctor in order for it to delete ur files not 100% you have to pay

no you don't, you've just got a trial version not the full free version. get the full free one (called starter edition) from majorgeeks.com and it'll remove the stuff okay. Between that and MBAM if there's stuff on there you should find and clear pretty much all of it....

bluereef

ive looked on major geeks and cant find that anywhere..took it into the shop and they now saying this virus attacks your reg and how ill ave 2 reinstall windows.when ive looked up on this virus they never said nothing about that

free4440273

bluereef wrote: »

my daughter as been on facebook and opened a link she was sent containing that virus..ive got norton 360 and its done all the scans and says its removed them but when i scanned again i set system restore to off like i was advised and scanned again and ive still got it..can someone tell me how to get rid of it please.

sorry its W32.Koobface.B

too late now: but: turn OFF SystemRes; remove virus etc; turn back ON SR, yes??