worm.win32.netsky

R

rnvilla

New Member
How in the world do you get rid of "worm.win32.netsky"? I'm one step above "computer illiterate". I have searched the internet but don't know what info to trust. Thanks, Tim.
 
Description

This worm spreads via the Internet as an attachment to infected messages. It sends itself to email addresses harvested from the victim machine.

The worm is activated when the user launches the attached file by clicking on the attachment. The worm will then install itself and start propagating.

The worm itself is a PE EXE file, written in Microsoft Visual C++ and packed using UPX. The packed file is approximately 24KB in size and the unpacked file is approximately 138KB in size.

How to remove?


Daniel

so long as it is the basic netsky, this will do it.

Click start, run and type in MRT, this will open the malicious software removal tool, run this tool if you have the tool as Netsky is in the database,
if you do not have this tool, then go here,

http://www.microsoft.com/security/malwar...
and down load it, it is totaly free, it should update automaticaly, run the scan for the full system, Netsky should be removed and disposed of.
 
Last edited:
I'd suggest sth but I'm afraid not to look like a communist.
Haha joke.
I'd say, the both posts above my are ok, but if you consider it hard to use MRT or hard to update (lol!) then just scan! If it found the virus, it sure found a file which is infected. Just delete the file manually. What's the problem?
 
GameMaster said:
I'd suggest sth but I'm afraid not to look like a communist.
Haha joke.
I'd say, the both posts above my are ok, but if you consider it hard to use MRT or hard to update (lol!) then just scan! If it found the virus, it sure found a file which is infected. Just delete the file manually. What's the problem?
Click to expand...

And if it infected a Windows file :rolleyes:
 
The only times I've seen that lately, it was a window that popped up on your screen claiming that you are infected by it. In reality, all it is is a piece of crap spyware program created by some idiot trying to rip you off.

Try running combofix (do a Google search to find it) to get rid of it.
 
SirKenin said:
The only times I've seen that lately, it was a window that popped up on your screen claiming that you are infected by it. In reality, all it is is a piece of crap spyware program created by some idiot trying to rip you off.

Try running combofix (do a Google search to find it) to get rid of it.
Click to expand...

Really, but we don't know how did he/she find out about the infection. Did he/she scan with AV or did sth pop out? If pop-up, SmitFraduFix by S!ri, if scan, the fix(es) are already on table.
 
Combofix is actually more effective at getting rid of it than SmitFraudFix, if for no other reason than it covers so many more infections. Of course, SmitFraudFix has it's uses too, no doubt.
 
Yes, that's the reason why we want to know how did he/she find out for the worm.
ComboFix can cover more infections, but if it's really true that he/she just got a pop-up and if it shows Smitfraud...well SmitfraudFix is there.
But forget it, looks like 'the victim' will not come here again.
 
Thanks for the responses. This all started when the color on my monitor changed and I thought it was going bad. Then I got a pop-up. The rest is history. I've just now got the chance to look at the infected computer. Will post results when I have some. Tim.
 
You must log in or register to reply here.
Back
Top