Vista - Brontok.KO worm help

07-01-2008

Hello,
I have a worm that I don't know how to get rid of. My AVG free security
kicked it out while my Super Anti-Spyware software was scanning. AVG did not
kick out the worm while it was running alone. According to AVG, the worm was
moved to the "vault" and I later deleted it. When scanning the computer
again, AVG does not kick out the worm while Super Anti-Spyware runs again but
when restarting my computer, I am asked for my email address and password
when opening my Yahoo mail and I keep getting a pop up telling me that my
Microsoft Indexer has stopped working. This indicates to me that the worm is
still there. Any information or help with this is greatly apprecitated.
Thanks,

Jerry

07-01-2008

Hi Mick,

Thank you very much for that information. I will try that but is it
also a good idea to shut down System Restore before the Safe Mode scans?
(Scan in full operation mode with Restore shut off) I heard that a virus or
worm can "live" within the Restore feature and by shutting it off to scan,
will help. I've heard that the scans cannot enter the Restore feature
otherwise. Thanks,

Jerry

"Mick Murphy" wrote:

Quote:

> Follow info below to reboot into Safe Mode.
> Also, download and install Spybot Search & Destroy prior to above.
> Once you are there, rescan with AVG, and your anti spyware program, and
> Spybot S and D.
>
> If AVG still can not remove it, uninstall AVG, install Avast, and rescan in
> Safe Mode again.
>
>
> http://www.avast.com/eng/download-avast-home.html
>
> Avast Anti-Virus is Vista compatible (32bit and 64bit Versions), FREE,
> auto-updating, and a low resources user of your computer.
> And, only have 1(one) Anti-Virus installed / running on your computer at any
> one time..
> Conflicts may occur if you have more than 1(one).
>
> http://www.spybot.info/en/index.html
>
> Spybot Search & Destroy 1.5.2 is a very good, FREE Anti-Spyware Program.
> Download, install, update, and immunize your System with it.
> Then SCAN with it.
> Update it, and scan your System once a fortnight.
>
> http://www.javacoolsoftware.com/spywareblaster.html
>
> SpywareBlaster 4.1 is a non-intrusive, FREE Anti-Spyware Program that runs
> in the background (no scanning by you!).
> SpywareBlaster prevents the installation of many so-called spyware, adware
> and malware programs by disabling the CLSIDs of popular spyware ActiveX
> controls, and also prevents the installation of any of them via a webpage
> Update it once a fortnight, and let it do its work in the background!
>
> Important re: Safe Mode
> If you happen to find a problem that you canâ€™t uninstall / delete, reboot
> the computer, and go into Safe Mode.
> To get into Safe mode, tap F8 right at Power On / Startup, and use UP arrow
> key to get to Safe Mode, then hit ENTER.
> RESCAN your computer with Avast and Spybot S & D while in Safe Mode.
>
> --
> Mick Murphy - Qld - Australia
>
>
> "Jerry Hughes" wrote:
>

Quote:

> > Hello,
> > I have a worm that I don't know how to get rid of. My AVG free security
> > kicked it out while my Super Anti-Spyware software was scanning. AVG did not
> > kick out the worm while it was running alone. According to AVG, the worm was
> > moved to the "vault" and I later deleted it. When scanning the computer
> > again, AVG does not kick out the worm while Super Anti-Spyware runs again but
> > when restarting my computer, I am asked for my email address and password
> > when opening my Yahoo mail and I keep getting a pop up telling me that my
> > Microsoft Indexer has stopped working. This indicates to me that the worm is
> > still there. Any information or help with this is greatly apprecitated.
> > Thanks,
> >
> > Jerry

07-01-2008	#1 (permalink)
Jerry Hughes n/a posts	Brontok.KO worm help Hello, I have a worm that I don't know how to get rid of. My AVG free security kicked it out while my Super Anti-Spyware software was scanning. AVG did not kick out the worm while it was running alone. According to AVG, the worm was moved to the "vault" and I later deleted it. When scanning the computer again, AVG does not kick out the worm while Super Anti-Spyware runs again but when restarting my computer, I am asked for my email address and password when opening my Yahoo mail and I keep getting a pop up telling me that my Microsoft Indexer has stopped working. This indicates to me that the worm is still there. Any information or help with this is greatly apprecitated. Thanks, Jerry
My System Specs

07-01-2008	#2 (permalink)
Jerry Hughes n/a posts	RE: Brontok.KO worm help Hi Mick, Thank you very much for that information. I will try that but is it also a good idea to shut down System Restore before the Safe Mode scans? (Scan in full operation mode with Restore shut off) I heard that a virus or worm can "live" within the Restore feature and by shutting it off to scan, will help. I've heard that the scans cannot enter the Restore feature otherwise. Thanks, Jerry "Mick Murphy" wrote: Quote: > Follow info below to reboot into Safe Mode. > Also, download and install Spybot Search & Destroy prior to above. > Once you are there, rescan with AVG, and your anti spyware program, and > Spybot S and D. > > If AVG still can not remove it, uninstall AVG, install Avast, and rescan in > Safe Mode again. > > > http://www.avast.com/eng/download-avast-home.html > > Avast Anti-Virus is Vista compatible (32bit and 64bit Versions), FREE, > auto-updating, and a low resources user of your computer. > And, only have 1(one) Anti-Virus installed / running on your computer at any > one time.. > Conflicts may occur if you have more than 1(one). > > http://www.spybot.info/en/index.html > > Spybot Search & Destroy 1.5.2 is a very good, FREE Anti-Spyware Program. > Download, install, update, and immunize your System with it. > Then SCAN with it. > Update it, and scan your System once a fortnight. > > http://www.javacoolsoftware.com/spywareblaster.html > > SpywareBlaster 4.1 is a non-intrusive, FREE Anti-Spyware Program that runs > in the background (no scanning by you!). > SpywareBlaster prevents the installation of many so-called spyware, adware > and malware programs by disabling the CLSIDs of popular spyware ActiveX > controls, and also prevents the installation of any of them via a webpage > Update it once a fortnight, and let it do its work in the background! > > Important re: Safe Mode > If you happen to find a problem that you canâ€™t uninstall / delete, reboot > the computer, and go into Safe Mode. > To get into Safe mode, tap F8 right at Power On / Startup, and use UP arrow > key to get to Safe Mode, then hit ENTER. > RESCAN your computer with Avast and Spybot S & D while in Safe Mode. > > -- > Mick Murphy - Qld - Australia > > > "Jerry Hughes" wrote: > Quote: > > Hello, > > I have a worm that I don't know how to get rid of. My AVG free security > > kicked it out while my Super Anti-Spyware software was scanning. AVG did not > > kick out the worm while it was running alone. According to AVG, the worm was > > moved to the "vault" and I later deleted it. When scanning the computer > > again, AVG does not kick out the worm while Super Anti-Spyware runs again but > > when restarting my computer, I am asked for my email address and password > > when opening my Yahoo mail and I keep getting a pop up telling me that my > > Microsoft Indexer has stopped working. This indicates to me that the worm is > > still there. Any information or help with this is greatly apprecitated. > > Thanks, > > > > Jerry
My System Specs

Similar Threads
Thread	Forum
conficker worm	Vista General
worm?	Vista performance & maintenance
Messenger worm	Live Messenger
Worm	Vista security
WORM Generic.Z	Vista General