Expert: Lorry - 3/22/2008

Question
I've been getting both a popup screen and/or a yellow triangle in my task tray with an "!" in it regarding a possible spyware infection in File: C:\Windows/wmi.exe, Threat: Abebot.  Both lead to a website for PC-Antispyware where they try to sell you their program.  How can I get these two things to stop?  One or the other pops up about every 10 minutes or so and it's driving me crazy!  I've run both my virus scan and Spybot - neither has helped with this.  Thanks.

Answer
Hi Jo Ann,

Using Internet Explorer, go to:

http://security.symantec.com/sscv6/default.asp?langid=ie&venid=sym

Click the GO button, then under Virus Detection, click Start. You might be told that you need to download and install ActiveX Controls for the scan to work, answer Yes.

Write down exactly anything it finds, then go to: http://www.symantec.com/search/  and do a search for what was found. Symantec usually has a removal tool and/or directions for removing manually. Make sure that you follow the instructions for removal, step by step, especially the part regarding disabling System Restore.

I have a feeling that the scan will find "Backdoor.Abebot", if yes, the following site has removal instructions:

http://www.symantec.com/security_response/writeup.jsp?docid=2005-011317-2305-99&...

Hope this helps!
Lorry