Geekzone: technology news, blogs, forums
Guest
Welcome Guest.
You haven't logged in yet. If you don't have an account you can register now.




30 posts

Geek


Topic # 57566 17-Feb-2010 16:07
Send private message

HELP.  I am not sure where this has come from. I haven't downloaded anything unusual so not sure how it got on my PC.

I am running Windows XP. We have Zonealarm and AVG.

How on earth do I get rid of it.

I have done a few searches on the internet about removal process and tried by booting up in Safe mode.  Didn't get any where with that.  Now when I try and boot up in goes to log in and then comes up logging off. Any help would be apprieciated. 

Thank goodness everything is back up and I have use of a laptop at the moment.

Create new topic
2475 posts

Uber Geek
+1 received by user: 559


  Reply # 299837 17-Feb-2010 16:30
Send private message



To remove Worm.Win32.Netsky, you must first stop any Worm.Win32.Netsky processes that are running in your computer's memory. To stop all Worm.Win32.Netsky processes, press CTRL+ALT+DELETE to open the Windows Task Manager. Click on the "Processes" tab, search for Worm.Win32.Netsky, then right-click it and select "End Process" key.

To delete Worm.Win32.Netsky registry keys, open the Windows Registry Editor by clicking on the Windows "Start" button and selecting "Run." Type "regedit" into the box and click "OK." Once the Registry Editor is open, search for the registry key "HKEY_LOCAL_MACHINE\Software\Worm.Win32.Netsky." Right-click this registry key and select "Delete."

Finally, to completely get rid of Worm.Win32.Netsky, you must manually remove other Worm.Win32.Netsky files. These Worm.Win32.Netsky files can be in the form of EXE, DLL, LSP, TOOLBAR, BROWSER HIJACK, and/or BROWSER PLUGIN. For example, Worm.Win32.Netsky might create a file like
%PROGRAM_FILES%\Worm.Win32.Netsky\Worm.Win32.Netsky.exe. Locate and remove these files.

and to be on the safe side download a good malware program like  Malwarebytes or similar and scan your pc for anything else that maybe lurking



30 posts

Geek


  Reply # 299947 17-Feb-2010 21:34
Send private message

hi there , thanks for the reply .... here is the update .... when we discovered the worm I ran skybot which deleted most of the nasties ... I rebooted the pc only to find that xp loaded but it came up asking to log in to your account { XP} when I do it says loading then changes to saving account info and thats it it wont go any further ... its like being stuck in a loop , so at this point in time I now can no longer get to my desktop at all .Im now at a complete dead end ... I would be very greatful to anyone who can get me through this ...

 
 
 
 


18 posts

Geek


  Reply # 306414 11-Mar-2010 21:54
Send private message

kazza_nz_05: hi there , thanks for the reply .... here is the update .... when we discovered the worm I ran skybot which deleted most of the nasties ... I rebooted the pc only to find that xp loaded but it came up asking to log in to your account { XP} when I do it says loading then changes to saving account info and thats it it wont go any further ... its like being stuck in a loop , so at this point in time I now can no longer get to my desktop at all .Im now at a complete dead end ... I would be very greatful to anyone who can get me through this ...



==============================================
Hi  kazza_nz_05,


Try this...

If your computer is able to run the internet in Safe mode with Networking:

Start your infected computer in Safe mode with Networking

Open your internet browser to connect.

Navigate to:

http://siri.urz.free.fr/Fix/SmitfraudFix.php

  (hit the button   "English" if you need to.)


Download SmitfraudFix to your Desktop.  (1.78 Megabytes)

Direct Download:
http://siri.urz.free.fr/Fix/SmitfraudFix.exe

Read the instruction at the bottom of his page: or

After downloading, CLOSE ALL Applictions most of all Internet Apps.
Stay in Safe mode.

Click  to open SmitfraudFix.exe

Select option #2 "CLEAN"  and press "Enter".

Allow it to run, (Explorer closes removing your system tray and clock),
and if it asks if you want to clean the registry type Y  for yes.

When it is done press  Q   for   Quit.   It will close and you should find
a file Rapport.txt  in your root folder (C:\rapport.txt).

I think this should help you out.

Reboot your computer to Normal Mode.

Then Make sure you run a good virus scanner


If SmitfraudFix fails to launch from your Desktop, move it directly to the root of
the system drive (usually C:), and launch it from there.

Hope this helps.



30 posts

Geek


  Reply # 306480 12-Mar-2010 09:23
Send private message

Hi there. Thanks for all you ideas. In the end we took the computer into work where the techies were able to load it up and get windows going and gave us programs to run to get rid of the virus. All cleaned up now. Thanks again :)

18 posts

Geek


  Reply # 306493 12-Mar-2010 09:42
Send private message

Thanks you  for the update, glad it all worked out.

25 posts

Geek


  Reply # 306495 12-Mar-2010 09:47
Send private message

kazza_nz_05: HELP.  I am not sure where this has come from. I haven't downloaded anything unusual so not sure how it got on my PC.

I am running Windows XP. We have Zonealarm and AVG.

How on earth do I get rid of it.

I have done a few searches on the internet about removal process and tried by booting up in Safe mode.  Didn't get any where with that.  Now when I try and boot up in goes to log in and then comes up logging off. Any help would be apprieciated. 

Thank goodness everything is back up and I have use of a laptop at the moment.


ZoneAlarm = So last year :-) A router firewall should be all you need.

Create new topic



Twitter »

Follow us to receive Twitter updates when new discussions are posted in our forums:



Follow us to receive Twitter updates when news items and blogs are posted in our frontpage:



Follow us to receive Twitter updates when tech item prices are listed in our price comparison site:





News »

New Zealand hits peak broadband data
Posted 18-Jan-2018 12:21


Amazon Echo devices coming to New Zealand early February 2018
Posted 18-Jan-2018 10:53


$3.74 million for new electric vehicles in New Zealand
Posted 17-Jan-2018 11:27


Nova 2i: Value, not excitement from Huawei
Posted 17-Jan-2018 09:02


Less news in Facebook News Feed revamp
Posted 15-Jan-2018 13:15


Australian Government contract awarded to Datacom Connect
Posted 11-Jan-2018 08:37


Why New Zealand needs a chief technology officer
Posted 6-Jan-2018 13:59


Amazon release Silk Browser and Firefox for Fire TV
Posted 21-Dec-2017 13:42


New Chief Technology Officer role created
Posted 19-Dec-2017 22:18


All I want for Christmas is a new EV
Posted 19-Dec-2017 19:54


How clever is this: AI will create 2.3 million jobs by 2020
Posted 19-Dec-2017 19:52


NOW to deploy SD-WAN to regional councils
Posted 19-Dec-2017 19:46


Mobile market competition issues ComCom should watch
Posted 18-Dec-2017 10:52


New Zealand government to create digital advisory group
Posted 16-Dec-2017 08:47


Australia datum changes means whole country moving 1.8 metres north-east
Posted 16-Dec-2017 08:39



Geekzone Live »

Try automatic live updates from Geekzone directly in your browser, without refreshing the page, with Geekzone Live now.



Are you subscribed to our RSS feed? You can download the latest headlines and summaries from our stories directly to your computer or smartphone by using a feed reader.

Alternatively, you can receive a daily email with Geekzone updates.