"puthputh" <puthp***@discussions.microsoft.com> wrote in message
news:7DE32B88-1A33-456F-9C26-C04F57A3E2A0@microsoft.com...
> hi,
>
> Two files on my computer have been infected with the "W.32.Spybot.Worm"
> virus, and I wanted your help. I used Norton 2004, but it says it can't
solve
> the problem.
>
> Basically, these are system files, and I wanted to know if I could solve
the
> problem by simply copying/pasting the two system files from another
computer
> with windows2000 (like mine) onto my computer, thus over-writing those two
> infected files.
>
> Would it work?
>
> The two files are:
> C:WINNT/System32/Winole.exe
> C:WINNT/System32/Bootmng.exe
>
> Thankyou very much for your time

"DL" wrote:

> What makes you think its either that virus or the two specific files are
> corrupted?
> Symantec makes no mention of these two files being corrupted, also NAV
> should be able to remove this specific virus
> http://securityresponse.symantec.com/avcenter/venc/data/w32.spybot.worm.html
> Perhaps you should investigate the 'scannow' command - system file checker,
> see help -
>
> "puthputh" <puthp***@discussions.microsoft.com> wrote in message
> news:7DE32B88-1A33-456F-9C26-C04F57A3E2A0@microsoft.com...
> > hi,
> >
> > Two files on my computer have been infected with the "W.32.Spybot.Worm"
> > virus, and I wanted your help. I used Norton 2004, but it says it can't
> solve
> > the problem.
> >
> > Basically, these are system files, and I wanted to know if I could solve
> the
> > problem by simply copying/pasting the two system files from another
> computer
> > with windows2000 (like mine) onto my computer, thus over-writing those two
> > infected files.
> >
> > Would it work?
> >
> > The two files are:
> > C:WINNT/System32/Winole.exe
> > C:WINNT/System32/Bootmng.exe
> >
> > Thankyou very much for your time
>
>
>

> Hi again,

> Let me explain the situation:
> I re-formatted my computer a few weeks ago, and since then it's been
> downloading lots of spyware and slowing the computer down. I would remove the
> spyware with Spybot, Ad-Aware, etc., but everytime I switched my modem on, it
> all came back.

> So I installed Norton AV 2004, and downloaded all the updates. Then I ran a
> scan, and it found seven viruses. It deleted five of the infected files, but
> said it could NOT delete the other TWO.

> NAV said these files were both infected with the "W.32.Spybot.Worm" virus.
> NAV also said these files were:
> C:WINNT/System32/Winole.exe
> C:WINNT/System32/Bootmng.exe

> The link you gave me tells me to go into windows in safe mode, and delete
> the files. But as these are system files, is that a good idea? Wouldn't it
> affect the way my computer runs?

> Also, what do you think of my idea of deleting those files and immediately
> replacing them with identical files from another windows 2000 computer?

> Thankyou very much




> "DL" wrote:

>> What makes you think its either that virus or the two specific files are
>> corrupted?
>> Symantec makes no mention of these two files being corrupted, also NAV
>> should be able to remove this specific virus
>> http://securityresponse.symantec.com/avcenter/venc/data/w32.spybot.worm.html
>> Perhaps you should investigate the 'scannow' command - system file checker,
>> see help -
>>
>> "puthputh" <puthp***@discussions.microsoft.com> wrote in message
>> news:7DE32B88-1A33-456F-9C26-C04F57A3E2A0@microsoft.com...
>> > hi,
>> >
>> > Two files on my computer have been infected with the "W.32.Spybot.Worm"
>> > virus, and I wanted your help. I used Norton 2004, but it says it can't
>> solve
>> > the problem.
>> >
>> > Basically, these are system files, and I wanted to know if I could solve
>> the
>> > problem by simply copying/pasting the two system files from another
>> computer
>> > with windows2000 (like mine) onto my computer, thus over-writing those two
>> > infected files.
>> >
>> > Would it work?
>> >
>> > The two files are:
>> > C:WINNT/System32/Winole.exe
>> > C:WINNT/System32/Bootmng.exe
>> >
>> > Thankyou very much for your time
>>
>>
>>

"Gary Smith" <bitbuc***@example.com> wrote in message
news:OfAEbPaLFHA.2648@TK2MSFTNGP14.phx.gbl...
>
> There are no files by those names on my machine.  Most likely they're part
> of the virus and not Windows files at all.  While in Safe Mode, create a
> new folder named something like Quarantine and copy those files into
> it, then delete the originals.  Then reboot normally and rerun NAV.
>
>
> puthputh <puthp***@discussions.microsoft.com> wrote:
> > Hi again,
>
> > Let me explain the situation:
> > I re-formatted my computer a few weeks ago, and since then it's been
> > downloading lots of spyware and slowing the computer down. I would
remove the
> > spyware with Spybot, Ad-Aware, etc., but everytime I switched my modem
on, it
> > all came back.
>
> > So I installed Norton AV 2004, and downloaded all the updates. Then I
ran a
> > scan, and it found seven viruses. It deleted five of the infected files,
but
> > said it could NOT delete the other TWO.
>
> > NAV said these files were both infected with the "W.32.Spybot.Worm"
virus.
> > NAV also said these files were:
> > C:WINNT/System32/Winole.exe
> > C:WINNT/System32/Bootmng.exe
>
> > The link you gave me tells me to go into windows in safe mode, and
delete
> > the files. But as these are system files, is that a good idea? Wouldn't
it
> > affect the way my computer runs?
>
> > Also, what do you think of my idea of deleting those files and
immediately
> > replacing them with identical files from another windows 2000 computer?
>
> > Thankyou very much
>
>
>
>
> > "DL" wrote:
>
> >> What makes you think its either that virus or the two specific files
are
> >> corrupted?
> >> Symantec makes no mention of these two files being corrupted, also NAV
> >> should be able to remove this specific virus
> >>

> >> > virus, and I wanted your help. I used Norton 2004, but it says it
can't
> >> solve
> >> > the problem.
> >> >
> >> > Basically, these are system files, and I wanted to know if I could
solve
> >> the
> >> > problem by simply copying/pasting the two system files from another
> >> computer
> >> > with windows2000 (like mine) onto my computer, thus over-writing
those two
> >> > infected files.
> >> >
> >> > Would it work?
> >> >
> >> > The two files are:
> >> > C:WINNT/System32/Winole.exe
> >> > C:WINNT/System32/Bootmng.exe
> >> >
> >> > Thankyou very much for your time
> >>
> >>
> >>
>
> --
> Gary L. Smith                gls***@yahoo.com
> Columbus, Ohio