Hi Everybody!

I am using IIS 5.0 on Windows 2000 server. I have norton antivirus for NT server which is updated everyday using schedular and also manually. From last few days a messages comes "that c:\documents and settings\..~2.exe is infected with w32.HLLW.Nebiwo virus. access to the file is denied" while running virus scan it does not found any virus. but the messages keeps on coming with the file ~2.exe infected with virus. Kindly help me how can i remove the virus. I have downloaded the fix from samantic website but it don't detect the virus. pl help.

Go here and download and run the removal tool:

http://securityresponse.symantec.com/avcenter/venc/data/w32.hllw.nebiwo.removal.tool.html

Sorry! First, Try booting into safe mode and deleting the file.
If no joy, Click Start > Run > type services.msc and click OK.
See if the file is listed as a running process, if so stop the process and then disable it. Delete the file.
Also check the following registry key and delete the entry for that file if listed:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run

Another thing to check. See if Norton has the file quarantined, if so delete it from there.

I have the same problem as the original message. The Norton antivirus picks up the virus, and puts it in quarantine. The problem is that the virus keeps popping up (and sent to quarantine by Norton). How can I STOP this virus from appearing again. I do go to the quarantine section and delete the files, but that does nothing. I also downloaded the removal tool but it does not find the virus (infected files are in quarantine). What do I do? Thanks.