TechSpot

"My tob" virus help

By learner1
Jun 5, 2005
  1. anybody know how to get rid of ths " My Tob2 " worm.
    I use norman virus control and it does not recognise it.

    please help
     
  2. howard_hopkinso

    howard_hopkinso TS Rookie Posts: 24,177   +19

    Hello and welcome to Techspot.

    Take a look HERE

    Regards Howard :wave: :wave:
     
  3. learner1

    learner1 TS Rookie Topic Starter Posts: 43

    Howard,
    Thanks for replying.
    I did what you suggested but it came back saying this particular Mytobar was not found.
    herunder is ths xoftspylog(small excert)

    ScanningRegKeys>
    <ScanningRegValues>
    </SW>
    <SW NAME = "MyTob">
    <REGVALUE VALUE = "MyTob System\CurrentControlSet\Control\Lsa\WINRUN"/>
    <REGVALUEFOUND NAME = "System\CurrentControlSet\Control\Lsa\WINRUN"/>
    </ScanningRegValues>
    <ScanningRegValuesChanged>
    </ScanningRegValuesChanged>
    <Information Message = "Scan Aborted by User"/>
    </Scanning>

    <Scanning TIME = "06 Jun 05 14:58:41">
    <ScanningRegKeys>
    </ScanningRegKeys>
    <ScanningRegValues>
    </SW>
    <SW NAME = "MyTob">
    <REGVALUE VALUE = "MyTob System\CurrentControlSet\Control\Lsa\WINRUN"/>
    <REGVALUEFOUND NAME = "System\CurrentControlSet\Control\Lsa\WINRUN"/>
    </ScanningRegValues>
    <ScanningRegValuesChanged>
    </ScanningRegValuesChanged>
    </Scanning>

    I have tried to use Regedit but I cannot find these values.
    Thanks for your help thus far

    learner1
     
  4. howard_hopkinso

    howard_hopkinso TS Rookie Posts: 24,177   +19

    OK. You need to identify exactly which version of the mytob virus you have.

    I have searched but cannot find mytob 2, only the ones listed below.


    Mytob
    Mytob.A
    Mytob.B
    Mytob.E
    Mytob.L
    Mytob.M
    Mytob.P
    Mytob.R
    Mytob.U
    Mytob.V
    Mytob.W
    Mytob.AG
    Mytob.AH
    Mytob.AR
    Mytob.AS
    Mytob.BC
    Mytob.BD
    Mytob.BV
    Mytob.CF
    Mytob.CH

    Regards Howard
     
  5. learner1

    learner1 TS Rookie Topic Starter Posts: 43

    Thanks howard,
    At least I got your name right this time.

    Where do you get The 2 from as in Myto 2 ?

    from the logfile I gave you do you no which set of key values I should be looking at
    You know Local- current - users - etc.
    Anyway thanks for replying

    By the way I run other adware finding products but only xsoft shows this
    it is of low problem area but it kills me that I cannot get rid of it.
    I am sure you understand.

    Thanks again

    kevin - learner1
     
  6. howard_hopkinso

    howard_hopkinso TS Rookie Posts: 24,177   +19

    In your original post you list the virus as My Tob2.

    A search for this brings no result.

    So I began searching for mytob and found numerous references.

    You might want to look HERE for more info on the mytob worm.

    Regards Howard :D
     
  7. learner1

    learner1 TS Rookie Topic Starter Posts: 43

    Howard.

    After an long search in the registry eventually found the entries.
    Thanks for your help
    learner1
     
  8. howard_hopkinso

    howard_hopkinso TS Rookie Posts: 24,177   +19

    Glad you got it sorted, and thanks for letting us know.

    Regards Howard :D
     
Topic Status:
Not open for further replies.

Similar Topics

Add New Comment

You need to be a member to leave a comment. Join thousands of tech enthusiasts and participate.
TechSpot Account You may also...