I am having trouble deleting a worm (worm.win32.netsky) off of my computer. I have ran several scans, and nothing is being detected, but I still have dialogue box warnings saying that my computer is infected.
2007-12-09 05:00:27 · 14 answers · asked by Anonymous in Computers & Internet ➔ Security
Download Spybot Search and Destroy, Ad-Aware, HiJackThis, and Avira Antivir.
Restart the computer in Safe Mode (start tapping F8 as soon as the computer starts to boot up, then choose Safe Mode with Networking).
Install the software. I'm assuming you don't have other AV software, but if you do, it's probably a good idea to uninstall that and install Avira Antivir, because obviously the last one wasn't up to the task of keeping you clean.
After installing, make sure to update the software to get the latest definitions (this is why we chose Safe Mode with Networking).
Attempt to run the software from Safe Mode. You may have to restart the computer to complete installations. If you do, just go back into Safe Mode. Run what software you can (not all software can be run in Safe Mode; I'm not sure if Ad-Aware can), then restart into normal mode and run the software again.
N.B. By default, HiJackThis will give you "false positives" because it wants you to see everything that's there and have you decide what should be there and what shouldn't be. make sure to find out what needs to be taken off. You can check online forum for help, e.g. http://www.techsupportforum.com/security-center/hijackthis-log-help/ .
2007-12-09 05:21:03 · answer #1 · answered by monterey_princess 2 · 1⤊ 0⤋
After dealing with this for two days. I was finally able to sucessfully remove this nuisance.
This is NOT the virus Worm.win32.netsky (although the popups will tell you that is what it is). This is one of the toughest little spywares I have ever dealt with.
It runs havoc on your internet explorer. If yo look at control panel at your Interent Explorer Ultimate Cleaner will be there instead of your home page.
The popups ALWAYS lead you to "Ultimate Cleaner" or "Udefender" a spyware program that you must pay for to clean this up.
Doing a McAfee or Norton scan will show you that you have been infected, but do little to remove the problem.
So I tried the free spamware removers---AVG and another one. I eventually went to http://antispyware.org/ and downloaded this program. It conducted a complete scan of my computer, found the culprit and quarantined my pc.
It took the entire day to do this. But, it is fixed!!!
I am positive that I got this through Limewire. When I initially did the scan with McAffee, a program I downloaded via Limwire had been infected.
It will take a few hours to do this. I was really angry about this whole thing. A word of caution....be careful of the things you download. Do not leave limewire up and running all the time.
Good Luck.
You will feel really good when this is removed!
2007-12-09 06:58:47 · answer #2 · answered by Seablanco1 6 · 1⤊ 0⤋
Yes, this is perfectly normal. The scan is going to eat up resources and churn through your files on your hard drive (typically, the bottleneck is most modern systems) looking for infected files. While it's doing this, everything will seem slower. Try and schedule these runs during off-hours when you're not using your computer. Or if you shut down your computer in off-hours, try and do it when you're taking a break from the computer for a while. Some AV programs may have an option to shut down the system after the scan has completed.
2016-05-22 08:03:23 · answer #3 · answered by ? 3 · 0⤊ 0⤋
The free Microsoft Malicious Software Removal Tool can remove Netsky. You can download it or run it from the Microsoft website here:
http://www.microsoft.com/security/malwareremove/families.mspx
But I strongly suspect that the dialog box warnings are fake and trying to swindle you.
Phony warnings or pop-ups about a virus infection and the attempt to sell you some useless software to "fix" the problem often indicates a Smitfraud infection.
Sounds like your computer may have a variant of this ubiquitous Smitfraud infection. Almost all "general purpose","all-in one" spyware and virus removal programs such as AVG, Norton, or Spybot S & D cannot remove it compleatly.
Free specialised Smitfraud removal tool is here:
http://siri.urz.free.fr/Fix/SmitfraudFix_En.php
Good luck.
2007-12-09 05:10:45 · answer #4 · answered by Anonymous · 0⤊ 0⤋
I don't know what "several scans" you have run or what program is generating the "dialogue box"
but Symantec has a netsky removal tool here:
http://www.symantec.com/security_response/writeup.jsp?docid=2004-021816-1759-99
Clearly if you are having malware and you are feeling the need to run multiple different scans then you have some basic computer issues to deal with... such as:
1) Your lack of knowledge as to having proper security installed on your computer (antivirus, firewall, antispyware, etc) from a RELIABLE vendor (like mcafee, norton, etc) that is properly configured and completely up to date.
2) If you have to run many scans then either you have too many antivirus programs installed on your computer (and/or see #1). You should only have 1 reliable one.. otherwise they will conflict causing neither to work properly.
3) Lastly, something you are doing is causing this to happen.. whether it is simply a matter of #1 and #2 or you are also combining those with unsafe browsing habits and/or ignoring the warnings that you were provided by whatever security suite you had (if you had one).
I would really recommend investing in proper security and perhaps in finding a reliable and qualified technician who can sort out your issues as well as providing you with some security awareness and computer maintenance trianing.
Good Luck
2007-12-09 05:08:57 · answer #5 · answered by Anonymous · 1⤊ 3⤋
Run the free Trend Micro online house call scan for virus. Follow the instructions on the webpage and complete the scan. If there is a virus this program will find and destroy. No conflict with your existing antivirus.
You may have to download their active "x", no problem.
http://housecall.trendmicro.com/
You can also run the free version of A2Squard, excellent for finding worms. http://www.emsisoft.com This company is out of Austria. Download the free version, with manual updates. Perform a complete scan,
Minddoctor, France
2007-12-09 05:12:02 · answer #6 · answered by MINDDOCTOR 7 · 0⤊ 1⤋
Yes, ScanSpyware can help you to detect and remove Worm.Win32.Netsky. ScanSpyware malware database updates are released daily, which can be installed automatically as well as manually from our website. These updates are not just limited to ScanSpyware purchased version so users having trial version can also get benefits from these daily updates. Using the strength of daily updated malware database, ScanSpyware trial version also gets the ability to detect latest spyware threats from your PC. At the same time, ScanSpyware trial version provides another excellent feature of creating detected malware log file. You can easily create this log file by clicking the 'Save Log' button after completing a scan.
2007-12-09 05:04:28 · answer #7 · answered by Anonymous · 0⤊ 4⤋
You have a smitfraud infection. Use the smitfraudfix tool in the link below.
http://siri.urz.free.fr/Fix/SmitfraudFix_En.php
IMPORTANT! Follow up with a scan using SAS.
Download and Install Super Antispyware free. Reboot into Safe mode and Run SAS. Allow it to quarantine whatever it finds.
http://www.superantispyware.com/
How to Start Windows in Safe Mode:
http://www.bleepingcomputer.com/tutorials/tutorial61.html
2007-12-09 05:05:26 · answer #8 · answered by Charley Horse 6 · 2⤊ 3⤋
The NetSky worm is a mass-mailing agent that gathers email addresses from your computer. It then spreads itself by sending itself to those email addresses and infecting the system of those who open the emails sent. The email message it sends out have varying subjects, message bodies and attachment file names.
http://antispywarebot.com/setup.php
The link above is for a removal tool.
2007-12-09 05:07:38 · answer #9 · answered by rlh242424 6 · 0⤊ 4⤋
yup
try this
downlaod these and update them
Spyware Blaster(immunizer)
AVG Spy free
A2 Free (wont conflict)
Spybot
AVG
Adaware
Norton System Scan(free)
update them and run two and scan then quarantine what you find, restart and scan with other
2007-12-09 10:06:01 · answer #10 · answered by Anonymous · 0⤊ 0⤋