"My tob" virus help

[learner1]

anybody know how to get rid of ths " My Tob2 " worm.
I use norman virus control and it does not recognise it.

please help

 

[howard_hopkinso]

Hello and welcome to Techspot.

Take a look HERE

Regards Howard :wave: :wave:

 

[learner1]

Howard,
Thanks for replying.
I did what you suggested but it came back saying this particular Mytobar was not found.
herunder is ths xoftspylog(small excert)

ScanningRegKeys>
<ScanningRegValues>
</SW>
<SW NAME = "MyTob">
<REGVALUE VALUE = "MyTob System\CurrentControlSet\Control\Lsa\WINRUN"/>
<REGVALUEFOUND NAME = "System\CurrentControlSet\Control\Lsa\WINRUN"/>
</ScanningRegValues>
<ScanningRegValuesChanged>
</ScanningRegValuesChanged>
<Information Message = "Scan Aborted by User"/>
</Scanning>

<Scanning TIME = "06 Jun 05 14:58:41">
<ScanningRegKeys>
</ScanningRegKeys>
<ScanningRegValues>
</SW>
<SW NAME = "MyTob">
<REGVALUE VALUE = "MyTob System\CurrentControlSet\Control\Lsa\WINRUN"/>
<REGVALUEFOUND NAME = "System\CurrentControlSet\Control\Lsa\WINRUN"/>
</ScanningRegValues>
<ScanningRegValuesChanged>
</ScanningRegValuesChanged>
</Scanning>

I have tried to use Regedit but I cannot find these values.
Thanks for your help thus far

learner1

 

[howard_hopkinso]

OK. You need to identify exactly which version of the mytob virus you have.

I have searched but cannot find mytob 2, only the ones listed below.


Mytob
Mytob.A
Mytob.B
Mytob.E
Mytob.L
Mytob.M
Mytob.P
Mytob.R
Mytob.U
Mytob.V
Mytob.W
Mytob.AG
Mytob.AH
Mytob.AR
Mytob.AS
Mytob.BC
Mytob.BD
Mytob.BV
Mytob.CF
Mytob.CH

Regards Howard

 

[learner1]

Thanks howard,
At least I got your name right this time.

Where do you get The 2 from as in Myto 2 ?

from the logfile I gave you do you no which set of key values I should be looking at
You know Local- current - users - etc.
Anyway thanks for replying

By the way I run other adware finding products but only xsoft shows this
it is of low problem area but it kills me that I cannot get rid of it.
I am sure you understand.

Thanks again

kevin - learner1

 

[howard_hopkinso]

In your original post you list the virus as My Tob2.

A search for this brings no result.

So I began searching for mytob and found numerous references.

You might want to look HERE for more info on the mytob worm.

Regards Howard

 

[learner1]

Howard.

After an long search in the registry eventually found the entries.
Thanks for your help
learner1

 

[howard_hopkinso]

Glad you got it sorted, and thanks for letting us know.

Regards Howard