Need help with trojan removal

[Mitchi]

I was happily using my Laptop that has Linus SuSE (Novell) on it, when all of a sudden, I go to turn it on one morning and it's super slow, won't connect to the internet and freezes worse than Windows Vista.

I go to run Spybot S&D and lo and behold, a trojan called Win32.Small.fb has manifested on my computer. It slows me down, and I can't seem to get rid of it (since spybot won't actually remove it).

I can't run any of my usual Windows programs that will help me get rid of it (I'm a novice with Linux and have used Windows for years), and I can't seem to navigate my way around this new OS that I have no experience with.

Anyone know of anything I can use to or do to get rid of this? Or am I just screwed and have to just do a system restore?

[HROAdmin26]

If you have SuSE running, I don't see how you have a Win32 executable "running." An exe compiled for Windows (Win32) will not run/execute inside a Linux OS.

Also known as...

SYMC Info

Discovered: February 7, 2005
Updated: February 13, 2007 12:33:09 PM
Also Known As: Net-Worm.Win32.Small.b [Kasper
Type: Worm
Systems Affected: Windows 2000, Windows 95, Windows 98, Windows Me, Windows NT, Windows Server 2003, Windows XP

[oz]

Welcome to the forums!

Any of the better Windows 'antivirus' websites should have the steps listed for removing it.

Have you checked there yet?

[Dapper Dan]

ClamWin will find it and tell you the path to it so you can remove it. And if that weren't enough, ClamWin is also free!

[cousinlucky]

Everyone at LinuxForums has more computer wisdom than I have but as someone who has had massive exposure to computer infections: I would advise you to just re-format your hard drive to make sure you get rid of whatever is within your computer.

If you find where something is hiding in your computer and try to eliminate it; it will just hide somewhere else.

[gogalthorp]

I can not believe that a windows virus can run in Linux. Unless it is running under Wine. If you use wine try 1) removing the wine directory, 2) remove and reinstall wine.

To see what process is eating CPU from the command line run

top

This will tell you what process is eating CPU.

you can kill the process with

kill PID (where PID is the process ID reported by top)

note you may need to be root to kill a process

Try logging in as root or another user does the problem persist?

[scrarfussi]

there must be some mistake here spybot sd is also a windows program how is he running spybot sd

[Mitchi]

@HROAdmin26

That's what I thought too. But sure as hell, it's there.

I can not believe that a windows virus can run in Linux. Unless it is running under Wine. If you use wine try 1) removing the wine directory, 2) remove and reinstall wine.

To see what process is eating CPU from the command line run

top

This will tell you what process is eating CPU.

you can kill the process with

kill PID (where PID is the process ID reported by top)

note you may need to be root to kill a process

Try logging in as root or another user does the problem persist?

When I log in as root, my computer works fine, and it's not lagging like it does in my main user account. I'm gonna try making a new user and seeing how that goes.

Also, the problems started before I even installed wine to begin with. I only installed it so I could find out what was wrong.

On an added note, How do I uninstall wine? I am a total novice here (well, for Linux anyways.

there must be some mistake here spybot sd is also a windows program how is he running spybot sd

Becuase I'm using it under wine o-o


@ozar

Eh, I tried most of the ways to remove it, but most of them call for Hijackthis, which won't run without some annoying DLL files anyways, and I don't care to hunt for them.

@Dapper dan

I might do that as a last resort, since I already have enough problems trying to install windows programs, seeing as my computer will randomly freeze during installation.

[Dapper Dan]

I just took it that he was dual booting and the machine was running SuSE and Windows, and the virus was of course on the Windows side. Mitchi, can you clarify for us?

[Mitchi]

I just took it that he was dual booting and the machine was running SuSE and Windows, and the virus was of course on the Windows side. Mitchi, can you clarify for us?

I'm running SuSE 10 (novell) and only that, with wine installed, my only Windows programs being antispyware/antivirus stuff.

I want to do a dual boot later, but only when I get a disk drive (my laptop has no disk drive, in case that's relevant in any way).

This is why I'm confused is because this trojan showed up on a Linux only computer.


Also, I made a new account and this one is running fine with no sign of slowdowns. And it connects to the internet just fine now too.


I take this as a sign that I should uninstall/reinstall wine and just stick with this other user account?