How to remove Cutwail spambot?

[Baboosh]

We got blacklisted at work and come to find out a computer has the cutwail spambot.

I found the computer that is infected but I cannot get the virus removed. We run Norton Corporate and it doesn't even find it, I found it through Microsoft Malicious Tool but it wouldn't remove it.

Any help?

[SunsetIE]

quick googling shows :

http://www.ehow.com/how_8270333_remove-cutwail-spambot.html

http://www.2-spyware.com/remove-cutwail.html

[Baboosh]

Did the first one, delisted IP from blacklist, ran scan, still found it.

3 minutes later relisted on blacklist.

[SunsetIE]

Dunno man, im not well versed in counter malware, just tossing up links incase you hadnt seen them.

[Baboosh]

Dunno man, im not well versed in counter malware, just tossing up links incase you hadnt seen them.

Problem is most of the places want you to download software and then pay to remove what they find.

[rdawg]

This is a business just format and re-image the hard drive to your corporate standards as you do with all PCs you buy.

Don't waste time trying to remove it and risk it coming back if you think you got it.

[Baboosh]

This is a business just format and re-image the hard drive to your corporate standards as you do with all PCs you buy.

Don't waste time trying to remove it and risk it coming back if you think you got it.

We are not setup that way, I'd have to do it all manually.

[el tardo]

you can try -
spybot
malwarebytes
superantispyware

if you try these and it doesnt work some times its easier and faster to re format your hd.

i have learned that no anti virus is perfect and works all the time so you better have your info backed up on a second hd or something.i lost a ton of programs and files and info thinking i was safe. now after i big problem i back up once a week. you have to in this day and age.

[njineermike]

Format re-image. If you're doing IT for a business and aren't "set up" for it, you're doing it wrong.

[Baboosh]

Format re-image. If you're doing IT for a business and aren't "set up" for it, you're doing it wrong.

I'm the owner and we're small, don't exactly have an IT department.

I mostly bug my buddies who are

[billofrights]

I'm the owner and we're small, don't exactly have an IT department.

I mostly bug my buddies who are

Fair enough, but probably still more time-saving to wipe it. Really good AV scanners take hours to run, you're better spent reloading the OS at this point.

[njineermike]

I'm the owner and we're small, don't exactly have an IT department.

I mostly bug my buddies who are

Business machines usually need to getting back up and running NOW. In the future, you might try running virtual machines with regular backups. Makes headaches like this not as bad. Plenty of guys here with IT experience who can help. I had a blacklist problem a few years back from a rogue machine a subcontractor installed that got infected with the autorun.inf virus and I found it with AVG on a thumb drive by accident.

[Baboosh]

Business machines usually need to getting back up and running NOW. In the future, you might try running virtual machines with regular backups. Makes headaches like this not as bad. Plenty of guys here with IT experience who can help. I had a blacklist problem a few years back from a rogue machine a subcontractor installed that got infected with the autorun.inf virus and I found it with AVG on a thumb drive by accident.

My buddy is a tech head so I'll have to bribe him with ammo or something to come tinker.

We've only had 1 or 2 issues in the past 3-4 years with viruses.

[njineermike]

My buddy is a tech head so I'll have to bribe him with ammo or something to come tinker.

We've only had 1 or 2 issues in the past 3-4 years with viruses.

Ammo? Might try something less valuable like a platinum ingot the size of a loaf of bread.

[Baboosh]

Ammo? Might try something less valuable like a platinum ingot the size of a loaf of bread.

But I get to buy him ammo and expense it. Which then means we need to go have a meeting about what we are going to do while making sure his payment operates right.

So then I would have to then buy myself ammo and expense so I could be consulted.