HELP. My computer has just shown this error

Forums › Microsoft Windows › HELP. My computer has just shown this error - worm.win32.netsky

kazza_nz_05

30 posts

Geek

#57566 17-Feb-2010 16:07

HELP. I am not sure where this has come from. I haven't downloaded anything unusual so not sure how it got on my PC.

I am running Windows XP. We have Zonealarm and AVG.

How on earth do I get rid of it.

I have done a few searches on the internet about removal process and tried by booting up in Safe mode. Didn't get any where with that. Now when I try and boot up in goes to log in and then comes up logging off. Any help would be apprieciated.

Thank goodness everything is back up and I have use of a laptop at the moment.

vexxxboy

4087 posts

Uber Geek

#299837 17-Feb-2010 16:30

To remove Worm.Win32.Netsky, you must first stop any Worm.Win32.Netsky processes that are running in your computer's memory. To stop all Worm.Win32.Netsky processes, press CTRL+ALT+DELETE to open the Windows Task Manager. Click on the "Processes" tab, search for Worm.Win32.Netsky, then right-click it and select "End Process" key.

To delete Worm.Win32.Netsky registry keys, open the Windows Registry Editor by clicking on the Windows "Start" button and selecting "Run." Type "regedit" into the box and click "OK." Once the Registry Editor is open, search for the registry key "HKEY_LOCAL_MACHINE\Software\Worm.Win32.Netsky." Right-click this registry key and select "Delete."

Finally, to completely get rid of Worm.Win32.Netsky, you must manually remove other Worm.Win32.Netsky files. These Worm.Win32.Netsky files can be in the form of EXE, DLL, LSP, TOOLBAR, BROWSER HIJACK, and/or BROWSER PLUGIN. For example, Worm.Win32.Netsky might create a file like
%PROGRAM_FILES%\Worm.Win32.Netsky\Worm.Win32.Netsky.exe. Locate and remove these files.

and to be on the safe side download a good malware program like Malwarebytes or similar and scan your pc for anything else that maybe lurking

Common sense is not as common as you think.

GoodSync

GoodSync. Easily back up and sync your files with GoodSync. Simple and secure file backup and synchronisation software will ensure that your files are never lost (affiliate link).

kazza_nz_05

30 posts

Geek

#299947 17-Feb-2010 21:34

hi there , thanks for the reply .... here is the update .... when we discovered the worm I ran skybot which deleted most of the nasties ... I rebooted the pc only to find that xp loaded but it came up asking to log in to your account { XP} when I do it says loading then changes to saving account info and thats it it wont go any further ... its like being stuck in a loop , so at this point in time I now can no longer get to my desktop at all .Im now at a complete dead end ... I would be very greatful to anyone who can get me through this ...

UsherR

18 posts

Geek

#306414 11-Mar-2010 21:54

kazza_nz_05: hi there , thanks for the reply .... here is the update .... when we discovered the worm I ran skybot which deleted most of the nasties ... I rebooted the pc only to find that xp loaded but it came up asking to log in to your account { XP} when I do it says loading then changes to saving account info and thats it it wont go any further ... its like being stuck in a loop , so at this point in time I now can no longer get to my desktop at all .Im now at a complete dead end ... I would be very greatful to anyone who can get me through this ...

==============================================
Hi kazza_nz_05,

Try this...

If your computer is able to run the internet in Safe mode with Networking:

Start your infected computer in Safe mode with Networking

Open your internet browser to connect.

Navigate to:

http://siri.urz.free.fr/Fix/SmitfraudFix.php

(hit the button "English" if you need to.)

Download SmitfraudFix to your Desktop. (1.78 Megabytes)

Direct Download:
http://siri.urz.free.fr/Fix/SmitfraudFix.exe

Read the instruction at the bottom of his page: or

After downloading, CLOSE ALL Applictions most of all Internet Apps.
Stay in Safe mode.

Click to open SmitfraudFix.exe

Select option #2 "CLEAN" and press "Enter".

Allow it to run, (Explorer closes removing your system tray and clock),
and if it asks if you want to clean the registry type Y for yes.

When it is done press Q for Quit. It will close and you should find
a file Rapport.txt in your root folder (C:\rapport.txt).

I think this should help you out.

Reboot your computer to Normal Mode.

Then Make sure you run a good virus scanner

If SmitfraudFix fails to launch from your Desktop, move it directly to the root of
the system drive (usually C:), and launch it from there.

Hope this helps.

kazza_nz_05

30 posts

Geek

#306480 12-Mar-2010 09:23

Hi there. Thanks for all you ideas. In the end we took the computer into work where the techies were able to load it up and get windows going and gave us programs to run to get rid of the virus. All cleaned up now. Thanks again :)

UsherR

18 posts

Geek

#306493 12-Mar-2010 09:42

Thanks you for the update, glad it all worked out.

PhantomSS

25 posts

Geek

#306495 12-Mar-2010 09:47

kazza_nz_05: HELP. I am not sure where this has come from. I haven't downloaded anything unusual so not sure how it got on my PC.

I am running Windows XP. We have Zonealarm and AVG.

How on earth do I get rid of it.

I have done a few searches on the internet about removal process and tried by booting up in Safe mode. Didn't get any where with that. Now when I try and boot up in goes to log in and then comes up logging off. Any help would be apprieciated.

Thank goodness everything is back up and I have use of a laptop at the moment.

ZoneAlarm = So last year :-) A router firewall should be all you need.