I think it's a worm, is it? So how do I de-worm?

Question

There's this executable file in my pc. I don't know how it got there, maybe from someone's removable hard disk or smthing. Point is, it won't go away. First I tried deleting. Worked. For a few seconds. When I closed the window, and re-opened, there it was like nothing ever happened. Fine.

Then I tried reformatting the partition that it came in. Yup, the whole damm partition. Worked. Again, for a few seconds. It just came back stronger than ever (so i'd think, LOL)

Then I tried deleting it in my registry editor.
I found it in
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\windows\CurrentVersion\Run\
with 2 .exe files of the same name, one in my System32, the other in my local pc System32.
The same thing happened, I deleted em, and nothing happens.

So it's a worm, right?
Now how the F can I get rid of it? Any ideas?

Thanks in advance.

Oh, i've already disabled my System Restore and I'm using Windows XP.

the file name is My_Heart.exe

Answer 1

Delete the partition and then format the drive......that will wipe everything...then try re-installing your OS.

Answer 2

Get de-wormer from a pet store.

If that doesn't work, then try searching online for the name of the executable.

Chances are it is something that windows needs to run, and recreates when you delete it. If it is indeed a worm, you may need to find a cleaner that will take care of it - and run it on ALL partitions on all hard drives (including network drives if you have a server, and any other machines that are connected to the network).

Answer 3

Would help to have the file name....

But it sounds like it is one of the system files that Windows itself creates while it is running from the behavior.

Please post the file name.

Answer 4

if your connected to the network you might get re-infected again and again from another computer. maybe they don't even know they are infected. worms are afraid of anti-spyware and will run like hell when you use one. i would recommend you to run spyware doctor: http://www.2-spyware.com/review-spyware-doctor.html
however i strongly suspect that your network or as you say removable drive is infected. in this case you will be re-infected again, if you don't clean all computers and all drives.

Answer 5

And the file is called?

Answer 6

It might be in your boot sector. I would re format the whole drive to get rid of it

Answer 7

This will remove my_heart.exe, free as part og the google pack.

http://www.pctools.com/spyware-doctor/?ref=google_a&gclid=CPyd-6vA74sCFSRQgAodRGwBPw