w32:Rontokbro@mm

High there dudes…

i just have been hit by this worm called “w32:Rontokbro@mm”, i am on a network with 7 clients and a linux proxy. i use avast home, it detects and removes the virus on all computers but when i returen them to the network, the alarm rings. :o how can i deal with this animal :stuck_out_tongue:

please healp poor lamikela…

In these clients, are you using Windows XP?
Can you schedule a boot-time scanning?
Start avast! > Right click the skin > Schedule a boot-time scanning
Select for scanning archives.
Boot.

Other option is scanning in SafeMode (repeatedly press F8 while booting): http://support.microsoft.com/default.aspx?scid=kb;en-us;315222

Other good thing is disable System Restore, boot, enable it again. If you find a virus keeps coming back after you delete it, it’s most probably infected the System Restore folder, the best way to solve this is to disable System Restore, reboot your machine and then enable it again. After all, run a full avast! scanning. System Restore cannot be disabled on Windows 9x and it’s not available in Windows 2k.

Enable/Disable System restore on Windows ME: http://support.microsoft.com/default.aspx?scid=kb;en-us;Q264887
Enable/Disable System restore on Windows XP: http://support.microsoft.com/default.aspx?scid=kb;[LN];310405

hi there!

i cam back a little late

my clients are using XP, i managed to down all the clients for cleaning with avast, but as soon as i got them back on the net, the sirens went on.

one thing that i foundout is that it spread through shared folders so i disabled all shares and did my clean up. i left the folders shared for about a week and the animal went away but now i have hods of spam coming to my net even today.

i have tried using spamassin on my fedora linux but they still come.

any dude who can assist on asuring no spam…