W32/Rontokbro.gen@mm

[titaniumbox]

---

hi guys,

anybody knows how to remove such worm? i don't know why mcafee always detects and warns me about this worm.its becoming a nuisance as it pops up a warning from time to time.i don't know why only mcafee detects such,i've done other online virus check like housecall.trendmicro,panda activescan,bitdefender,a2,stinger,kaspersky,,,noth ing is found.

can anybody suggest/help? i've disabled system restore in XP already but no luck.mcafee still gives me warning from time to time about rontokbro.gen

[pinadski]

nod32

[cebu_tux]

Better disinfect your system from a bootable rescue cdrs or dvdrs containing utilites like Hirens...

[titaniumbox]

@pinadski
ok,i'll try down.just downloaded their trial version.tnx.

@cebu_tux
what's thay HIRENs?? karon pa ko kadungog anah dah..

bitaw,madetect og madelete man sa mcafee og sa pand activescan.pero pag restart napod nimo sa pc..naa napod..dili jud matangtangtang..grrrr...

[Visual C#]

1.) Run a full system scan while in safe mode.
2.) http://www.nu2.nu/pebuilder/
3.) Install all the latest patches/hotfixes for your OS and all its associated programs
4.) Close any unnecessary ports, uninstall unnecessary Windows services and programs.

[titaniumbox]

yupz i did run in safe mode with networking when i do my scans.

luckily i found a new utility in mcafeehelp.com their online forum.that Autoruns v8.43 at http://www.sysinternals.com/Files/Autoruns.zip really did the trick as you can see the programs and processes upon start up.it was there that i found the entry to registry of the rontokbro virus.no wonder it never go away coz it keeps being loaded everytime i start...now there's no more virus! scan and rescan to be sure.

thanks guys for your inputs..