hey all,

I help support a very large group of PC's (on a domain) and other PC's on sperate workgroups.

I have this worm TURNING up on both domain and workgroups PC's.

I have located the the file at the root of the problem c:\windows\system32\hp-1003.exe

On the domain PC's, which have norton installed, norton has quranitined this file but keeps popping up messages every 20min or so and i'm unable to clear out the quranited files.

On the workgroup PC's, which have symanitic installed, i have located and deleted the file in question but a few days later the messages start to pop up again, which by the way are from other pc's workgroup and domain in completely different parts of the country.

All the network admin's have been scraching there heads over this for the LAST week or so.

any ideas? (SORRY about the spelling, been a LONG day and i've had a few!! )

NOTE: all PC's run windows 2000 with latest updates.
Disinfecting a network is always more difficult. Are you disconnecting the computers from the network and working on the separately? If not, they may continue to keep infecting each other, depending on how they're set up.

Also, have you tried scanning with Norton in Safe Mode? When in Normal Mode, infections may still be active, making it harder to remove them. But in Safe Mode, they remain inactive and are much easier to remove. Give that a try and let us know how it goes.Due to lack of feedback, I am closing this topic. If you are the original poster and you would like this topic to be re-opened for any reason, PM me or another moderator and it can be arranged.

If you are not the original poster and you require help, please start a New Topic with information about your computer and your problem.