i just have been hit by this worm called “w32:Rontokbro@mm”, i am on a network with 7 clients and a linux proxy. i use avast home, it detects and removes the virus on all computers but when i returen them to the network, the alarm rings. :o how can i deal with this animal
In these clients, are you using Windows XP?
Can you schedule a boot-time scanning?
Start avast! > Right click the skin > Schedule a boot-time scanning
Select for scanning archives.
Boot.
Other good thing is disable System Restore, boot, enable it again. If you find a virus keeps coming back after you delete it, it’s most probably infected the System Restore folder, the best way to solve this is to disable System Restore, reboot your machine and then enable it again. After all, run a full avast! scanning. System Restore cannot be disabled on Windows 9x and it’s not available in Windows 2k.
my clients are using XP, i managed to down all the clients for cleaning with avast, but as soon as i got them back on the net, the sirens went on.
one thing that i foundout is that it spread through shared folders so i disabled all shares and did my clean up. i left the folders shared for about a week and the animal went away but now i have hods of spam coming to my net even today.
i have tried using spamassin on my fedora linux but they still come.