DIGIT-ARC read-only archive · snapshot: July 23, 2026

"w32.Rontokbro@mm" problems

9 posts · originally from https://geek.digit.in/community/threads/w32-rontokbro-mm-problems.30725/

K
kguragain Original post #1
Jun 23, 2006 at 12:48 PM
My PC infected by “w32.Rontokbro@mm” and “I-worm/VB.GG”. I have cleaned these several times by using Norton Antivirus, AVG Antivirus. It seems ok two three days but sometimes after affecting by the same worm/virus again. I have spent several hours in a week to fix these threats but not getting permanent solution. So I want help from you and please suggest the best tool to delete “w32.rontokrob@mm” and “I-worm/VB.GG”.
My PC is connected to LAN.

Krishna
Kathmandu
QwertyManiac
Jun 23, 2006 at 10:17 PM
Disable system restore before you remove the virus/worm. And since you are on LAN make sure that other PCs arent infected either!
JGuru
JGuru #3
Jun 24, 2006 at 8:53 PM
Use Norton 2006 with latest updates. Do a full System scan. It should be able to
delete the Worm. Otherwise boot in safe-mode and do a scan using Norton.
Also disable System Restore. If you are on LAN the other Pcs also would be infected so disconnect them first. You must remove the worm from all machines then only connect to the LAN. Also check your System for any Spyware using SpyBot. I hope your problem gets solved.
drgrudge
Jun 24, 2006 at 10:02 PM
Ok shovik is banned. Don't promote piracy here.
src2206
src2206 #5
Jun 25, 2006 at 8:35 PM
Hi kguragain,
If you are keen to disinfect your PC completely I suggest the following:
1. Please download HijackThis . This program will help us determine if there are any spyware/malware on your computer. Double-click on the file you just downloaded. Click on the "Unzip" button to install. It will by default install to the directory - C:\PROGRAM FILES\HIJACKTHIS\ Run a scan and save the log file. Do not fix anything in HijackThis since they may be harmless. Make sure to include the System information at the top of the log as well.

2. Do a system scan with HJT and save the logfile.

3. I do not think digit forum has any option option for HJT Log help so go to www.techsupportforum.com and regiter yourself [its completely free.]; post the HJT ligfile there. I am helping there as a Senior Trainee Analyst so you can be rest assured that I am giving these suggestions to you with certain authority on the subject :smile:. If you you go to TSF and feel that I should take up your log to help you mention that at the begining of the log as your comment. My user name at TSF is same as here.
Hope your problem get solved.
Thank you
D
dabster #6
Jun 27, 2006 at 5:08 PM
Haah ! Intelligent virus.....
Go to *sophos.com Search for a virus specific utility....I got it from there....It will be some .com file run it on the infected computer...

The problems like invisible Folder options will be dealt easily by this utility...
And it will completely heal your system...
Also don't forget to disable system restore before you use the utility....

Tell us that it worked and your comp is free from virus...
Vyasram
Vyasram #7
Jun 27, 2006 at 5:54 PM
did u do that in safe mode, if not update ur norton and run a scan in safe mode.
A
AKM #8
Dec 26, 2006 at 8:58 AM
Hi Krishna,

Have u managed to get the permanent solution for the Iworm/VB.GG?
I'm facing the same problem and tried out some methods, but nothing has given a permamnent solution.

Could you please update me with the solution methods.

Thanks,

AKM

kguragain said:
My PC infected by “w32.Rontokbro@mm” and “I-worm/VB.GG”. I have cleaned these several times by using Norton Antivirus, AVG Antivirus. It seems ok two three days but sometimes after affecting by the same worm/virus again. I have spent several hours in a week to fix these threats but not getting permanent solution. So I want help from you and please suggest the best tool to delete “w32.rontokrob@mm” and “I-worm/VB.GG”.
My PC is connected to LAN.

Krishna
Kathmandu
Vishal Gupta
Dec 27, 2006 at 5:14 PM
Ahem! bumped after 6 months :D

Thread reported...