Geekzone: technology news, blogs, forums
Guest
Welcome Guest.
You haven't logged in yet. If you don't have an account you can register now.


30 posts

Geek


Topic # 57566 17-Feb-2010 16:07
Send private message

HELP.  I am not sure where this has come from. I haven't downloaded anything unusual so not sure how it got on my PC.

I am running Windows XP. We have Zonealarm and AVG.

How on earth do I get rid of it.

I have done a few searches on the internet about removal process and tried by booting up in Safe mode.  Didn't get any where with that.  Now when I try and boot up in goes to log in and then comes up logging off. Any help would be apprieciated. 

Thank goodness everything is back up and I have use of a laptop at the moment.

Create new topic
2618 posts

Uber Geek
+1 received by user: 630


  Reply # 299837 17-Feb-2010 16:30
Send private message



To remove Worm.Win32.Netsky, you must first stop any Worm.Win32.Netsky processes that are running in your computer's memory. To stop all Worm.Win32.Netsky processes, press CTRL+ALT+DELETE to open the Windows Task Manager. Click on the "Processes" tab, search for Worm.Win32.Netsky, then right-click it and select "End Process" key.

To delete Worm.Win32.Netsky registry keys, open the Windows Registry Editor by clicking on the Windows "Start" button and selecting "Run." Type "regedit" into the box and click "OK." Once the Registry Editor is open, search for the registry key "HKEY_LOCAL_MACHINE\Software\Worm.Win32.Netsky." Right-click this registry key and select "Delete."

Finally, to completely get rid of Worm.Win32.Netsky, you must manually remove other Worm.Win32.Netsky files. These Worm.Win32.Netsky files can be in the form of EXE, DLL, LSP, TOOLBAR, BROWSER HIJACK, and/or BROWSER PLUGIN. For example, Worm.Win32.Netsky might create a file like
%PROGRAM_FILES%\Worm.Win32.Netsky\Worm.Win32.Netsky.exe. Locate and remove these files.

and to be on the safe side download a good malware program like  Malwarebytes or similar and scan your pc for anything else that maybe lurking




Common sense is not as common as you think.




30 posts

Geek


  Reply # 299947 17-Feb-2010 21:34
Send private message

hi there , thanks for the reply .... here is the update .... when we discovered the worm I ran skybot which deleted most of the nasties ... I rebooted the pc only to find that xp loaded but it came up asking to log in to your account { XP} when I do it says loading then changes to saving account info and thats it it wont go any further ... its like being stuck in a loop , so at this point in time I now can no longer get to my desktop at all .Im now at a complete dead end ... I would be very greatful to anyone who can get me through this ...

18 posts

Geek


  Reply # 306414 11-Mar-2010 21:54
Send private message

kazza_nz_05: hi there , thanks for the reply .... here is the update .... when we discovered the worm I ran skybot which deleted most of the nasties ... I rebooted the pc only to find that xp loaded but it came up asking to log in to your account { XP} when I do it says loading then changes to saving account info and thats it it wont go any further ... its like being stuck in a loop , so at this point in time I now can no longer get to my desktop at all .Im now at a complete dead end ... I would be very greatful to anyone who can get me through this ...



==============================================
Hi  kazza_nz_05,


Try this...

If your computer is able to run the internet in Safe mode with Networking:

Start your infected computer in Safe mode with Networking

Open your internet browser to connect.

Navigate to:

http://siri.urz.free.fr/Fix/SmitfraudFix.php

  (hit the button   "English" if you need to.)


Download SmitfraudFix to your Desktop.  (1.78 Megabytes)

Direct Download:
http://siri.urz.free.fr/Fix/SmitfraudFix.exe

Read the instruction at the bottom of his page: or

After downloading, CLOSE ALL Applictions most of all Internet Apps.
Stay in Safe mode.

Click  to open SmitfraudFix.exe

Select option #2 "CLEAN"  and press "Enter".

Allow it to run, (Explorer closes removing your system tray and clock),
and if it asks if you want to clean the registry type Y  for yes.

When it is done press  Q   for   Quit.   It will close and you should find
a file Rapport.txt  in your root folder (C:\rapport.txt).

I think this should help you out.

Reboot your computer to Normal Mode.

Then Make sure you run a good virus scanner


If SmitfraudFix fails to launch from your Desktop, move it directly to the root of
the system drive (usually C:), and launch it from there.

Hope this helps.



30 posts

Geek


  Reply # 306480 12-Mar-2010 09:23
Send private message

Hi there. Thanks for all you ideas. In the end we took the computer into work where the techies were able to load it up and get windows going and gave us programs to run to get rid of the virus. All cleaned up now. Thanks again :)

18 posts

Geek


  Reply # 306493 12-Mar-2010 09:42
Send private message

Thanks you  for the update, glad it all worked out.

25 posts

Geek


  Reply # 306495 12-Mar-2010 09:47
Send private message

kazza_nz_05: HELP.  I am not sure where this has come from. I haven't downloaded anything unusual so not sure how it got on my PC.

I am running Windows XP. We have Zonealarm and AVG.

How on earth do I get rid of it.

I have done a few searches on the internet about removal process and tried by booting up in Safe mode.  Didn't get any where with that.  Now when I try and boot up in goes to log in and then comes up logging off. Any help would be apprieciated. 

Thank goodness everything is back up and I have use of a laptop at the moment.


ZoneAlarm = So last year :-) A router firewall should be all you need.

Create new topic

Twitter »

Follow us to receive Twitter updates when new discussions are posted in our forums:



Follow us to receive Twitter updates when news items and blogs are posted in our frontpage:



Follow us to receive Twitter updates when tech item prices are listed in our price comparison site:





News »

Microsoft Dynamics 365 Business Central launches
Posted 10-Jul-2018 10:40


Spark completes first milestone in voice platform upgrade
Posted 10-Jul-2018 09:36


Microsoft ices heated developers
Posted 6-Jul-2018 20:16


PB Technologies charged for its extended warranties and warned for bait advertising
Posted 3-Jul-2018 15:45


Almost 20,000 people claim credits from Spark
Posted 29-Jun-2018 10:40


Cove sells NZ's first insurance policy via chatbot
Posted 25-Jun-2018 10:04


N4L helping TAKA Trust bridge the digital divide for Lower Hutt students
Posted 18-Jun-2018 13:08


Winners Announced for 2018 CIO Awards
Posted 18-Jun-2018 13:03


Logitech Rally sets new standard for USB-connected video conference cameras
Posted 18-Jun-2018 09:27


Russell Stanners steps down as Vodafone NZ CEO
Posted 12-Jun-2018 09:13


Intergen recognised as 2018 Microsoft Country Partner of the Year for New Zealand
Posted 12-Jun-2018 08:00


Finalists Announced For Microsoft NZ Partner Awards
Posted 6-Jun-2018 15:12


Vocus Group and Vodafone announce joint venture to accelerate fibre innovation
Posted 5-Jun-2018 10:52


Kogan.com to launch Kogan Mobile in New Zealand
Posted 4-Jun-2018 14:34


Enable doubles fibre broadband speeds for its most popular wholesale service in Christchurch
Posted 2-Jun-2018 20:07



Geekzone Live »

Try automatic live updates from Geekzone directly in your browser, without refreshing the page, with Geekzone Live now.



Are you subscribed to our RSS feed? You can download the latest headlines and summaries from our stories directly to your computer or smartphone by using a feed reader.

Alternatively, you can receive a daily email with Geekzone updates.