Geekzone: technology news, blogs, forums
Guest
Welcome Guest.
You haven't logged in yet. If you don't have an account you can register now.


kazza_nz_05

30 posts

Geek


#57566 17-Feb-2010 16:07
Send private message

HELP.  I am not sure where this has come from. I haven't downloaded anything unusual so not sure how it got on my PC.

I am running Windows XP. We have Zonealarm and AVG.

How on earth do I get rid of it.

I have done a few searches on the internet about removal process and tried by booting up in Safe mode.  Didn't get any where with that.  Now when I try and boot up in goes to log in and then comes up logging off. Any help would be apprieciated. 

Thank goodness everything is back up and I have use of a laptop at the moment.

Create new topic
vexxxboy
4244 posts

Uber Geek


  #299837 17-Feb-2010 16:30
Send private message



To remove Worm.Win32.Netsky, you must first stop any Worm.Win32.Netsky processes that are running in your computer's memory. To stop all Worm.Win32.Netsky processes, press CTRL+ALT+DELETE to open the Windows Task Manager. Click on the "Processes" tab, search for Worm.Win32.Netsky, then right-click it and select "End Process" key.

To delete Worm.Win32.Netsky registry keys, open the Windows Registry Editor by clicking on the Windows "Start" button and selecting "Run." Type "regedit" into the box and click "OK." Once the Registry Editor is open, search for the registry key "HKEY_LOCAL_MACHINE\Software\Worm.Win32.Netsky." Right-click this registry key and select "Delete."

Finally, to completely get rid of Worm.Win32.Netsky, you must manually remove other Worm.Win32.Netsky files. These Worm.Win32.Netsky files can be in the form of EXE, DLL, LSP, TOOLBAR, BROWSER HIJACK, and/or BROWSER PLUGIN. For example, Worm.Win32.Netsky might create a file like
%PROGRAM_FILES%\Worm.Win32.Netsky\Worm.Win32.Netsky.exe. Locate and remove these files.

and to be on the safe side download a good malware program like  Malwarebytes or similar and scan your pc for anything else that maybe lurking




Common sense is not as common as you think.




kazza_nz_05

30 posts

Geek


  #299947 17-Feb-2010 21:34
Send private message

hi there , thanks for the reply .... here is the update .... when we discovered the worm I ran skybot which deleted most of the nasties ... I rebooted the pc only to find that xp loaded but it came up asking to log in to your account { XP} when I do it says loading then changes to saving account info and thats it it wont go any further ... its like being stuck in a loop , so at this point in time I now can no longer get to my desktop at all .Im now at a complete dead end ... I would be very greatful to anyone who can get me through this ...

UsherR
18 posts

Geek


  #306414 11-Mar-2010 21:54
Send private message

kazza_nz_05: hi there , thanks for the reply .... here is the update .... when we discovered the worm I ran skybot which deleted most of the nasties ... I rebooted the pc only to find that xp loaded but it came up asking to log in to your account { XP} when I do it says loading then changes to saving account info and thats it it wont go any further ... its like being stuck in a loop , so at this point in time I now can no longer get to my desktop at all .Im now at a complete dead end ... I would be very greatful to anyone who can get me through this ...



==============================================
Hi  kazza_nz_05,


Try this...

If your computer is able to run the internet in Safe mode with Networking:

Start your infected computer in Safe mode with Networking

Open your internet browser to connect.

Navigate to:

http://siri.urz.free.fr/Fix/SmitfraudFix.php

  (hit the button   "English" if you need to.)


Download SmitfraudFix to your Desktop.  (1.78 Megabytes)

Direct Download:
http://siri.urz.free.fr/Fix/SmitfraudFix.exe

Read the instruction at the bottom of his page: or

After downloading, CLOSE ALL Applictions most of all Internet Apps.
Stay in Safe mode.

Click  to open SmitfraudFix.exe

Select option #2 "CLEAN"  and press "Enter".

Allow it to run, (Explorer closes removing your system tray and clock),
and if it asks if you want to clean the registry type Y  for yes.

When it is done press  Q   for   Quit.   It will close and you should find
a file Rapport.txt  in your root folder (C:\rapport.txt).

I think this should help you out.

Reboot your computer to Normal Mode.

Then Make sure you run a good virus scanner


If SmitfraudFix fails to launch from your Desktop, move it directly to the root of
the system drive (usually C:), and launch it from there.

Hope this helps.



kazza_nz_05

30 posts

Geek


  #306480 12-Mar-2010 09:23
Send private message

Hi there. Thanks for all you ideas. In the end we took the computer into work where the techies were able to load it up and get windows going and gave us programs to run to get rid of the virus. All cleaned up now. Thanks again :)

UsherR
18 posts

Geek


  #306493 12-Mar-2010 09:42
Send private message

Thanks you  for the update, glad it all worked out.

PhantomSS
25 posts

Geek


  #306495 12-Mar-2010 09:47
Send private message

kazza_nz_05: HELP.  I am not sure where this has come from. I haven't downloaded anything unusual so not sure how it got on my PC.

I am running Windows XP. We have Zonealarm and AVG.

How on earth do I get rid of it.

I have done a few searches on the internet about removal process and tried by booting up in Safe mode.  Didn't get any where with that.  Now when I try and boot up in goes to log in and then comes up logging off. Any help would be apprieciated. 

Thank goodness everything is back up and I have use of a laptop at the moment.


ZoneAlarm = So last year :-) A router firewall should be all you need.

Create new topic





News and reviews »

Air New Zealand Starts AI adoption with OpenAI
Posted 24-Jul-2025 16:00


eero Pro 7 Review
Posted 23-Jul-2025 12:07


BeeStation Plus Review
Posted 21-Jul-2025 14:21


eero Unveils New Wi-Fi 7 Products in New Zealand
Posted 21-Jul-2025 00:01


WiZ Introduces HDMI Sync Box and other Light Devices
Posted 20-Jul-2025 17:32


RedShield Enhances DDoS and Bot Attack Protection
Posted 20-Jul-2025 17:26


Seagate Ships 30TB Drives
Posted 17-Jul-2025 11:24


Oclean AirPump A10 Water Flosser Review
Posted 13-Jul-2025 11:05


Samsung Galaxy Z Fold7: Raising the Bar for Smartphones
Posted 10-Jul-2025 02:01


Samsung Galaxy Z Flip7 Brings New Edge-To-Edge FlexWindow
Posted 10-Jul-2025 02:01


Epson Launches New AM-C550Z WorkForce Enterprise printer
Posted 9-Jul-2025 18:22


Samsung Releases Smart Monitor M9
Posted 9-Jul-2025 17:46


Nearly Half of Older Kiwis Still Write their Passwords on Paper
Posted 9-Jul-2025 08:42


D-Link 4G+ Cat6 Wi-Fi 6 DWR-933M Mobile Hotspot Review
Posted 1-Jul-2025 11:34


Oppo A5 Series Launches With New Levels of Durability
Posted 30-Jun-2025 10:15









Geekzone Live »

Try automatic live updates from Geekzone directly in your browser, without refreshing the page, with Geekzone Live now.



Are you subscribed to our RSS feed? You can download the latest headlines and summaries from our stories directly to your computer or smartphone by using a feed reader.