Worm infected Daughters Laptop (worm.win32.netsky)

[SandRat]

Ok,

Daughter's laptop with an up to date anti-virus program and firewall has gotten infected with a worm called worm.win32.netsky. Can't find a removal program for this bugger and the scans haven't found or removed it.

She was going to various School District web sites to apply for a teaching job when it happened

It loaded on it's own new desktop icons, and diabled remove program from the task bar along with Ctl-Alt-Del.

Anyone out there got ideas?

[madison10]

She wasn’t by any chance using Trend Micro was she? I’ve been having trouble tonight.

[Swordmaker]

Manual worm netsky removal process

[IllumiNaughtyByNature]

Worm.win32.netsky

Try this.

[SandRat]

Nope.

[stuartcr]

Try a search for it.

[kingu]

Symantec's removal tool - I've had virus scanners trigger on the e-mail box as being infected (most common e-mailed virus on the net), and I always tell the anti-virus to just ignore the file. She should use gmail or yahoo mail to handle e-mail to prevent these issues.

[jdm]

Hi SandRat, I had this exact same infection before and would be happy to walk you thru the removal process. You could run AVG, Norton, etc. but unless this infection is dealt with through specific removal tools, it is likely to keep coming back.

Please download SmitfraudFix (by S!Ri) to your Desktop.

Double-click SmitfraudFix.exe
Select option #1 - Search by typing 1 and press "Enter"; a text file will appear, which lists infected files (if present).
Please copy/paste the content of that report into your next reply (or just FReepmail it).

**If the tool fails to launch from the Desktop, please move SmitfraudFix.exe directly to the root of the system drive (usually C:), and launch from there.

[Bloody Sam Roberts]

Worm.NetSky.T Removal Guide

[Uri’el-2012]

Dump Gates

Get Root !

[SandRat]

Thanks,

Printed off and gave to my daughter to try where she is house sitting.

[SandRat]

Thanks printed off and gave to my daughter who’s house sitting.

[SandRat]

Daughter will Frmail you tomorrow to report.

[RDTF]

do you know whow to go in and reset the laptop to an earlier date before the worm showed up? Sometimes this is the only thing that works.

[SandRat]

tried that. no go.

[SandRat]

Thanks to you all.

Just got a phone report from daughter that by using one of the tools,.. I forgot to ask which one,.. she was able to get rid of..

worm.win32.NetSky now.

just the usual clean up stuff now.

[B4Ranch]

Now, may not be the time for humor.

[jdm]

You’re referring to System Restore. Complex infections sometimes leave remnants in System Restore; that’s why it’s best to delete all previous restore points and reset System Restore, after removing a nasty virus (otherwise you may get re-infected).

[RDTF]

yep that’s it!

[Lee'sGhost]

You did not mention Thunderbird. Any reason why?