Reply
Regular Visitor
dhcarstens
Posts: 9
Registered: ‎04-15-2008

worm.win32.netbooster

I have apparently been infected.  I get messages concerning the following spywares: Trojan.win32.agent.brk, spy.html.paylap.b, worm.win32.netsky, worm.win32.netbooster (some of these may be misspelled).  In addition, the spyware continually trys to change my homepage and direct me to spywareeiso.com.  Also my desktop is now an ominous red with a central weapon-like symbol and a button inviting me to download protective software.

 

I have Norton 360.  I have updated my virus/spyware and run a comprehensive check.  This doesn't seem to help.  I can't restore my computer to any earlier date. Short of reformating my hard drive, is there any other solution?  Why doesn't Norton take this out????

 

I have disconnected my internet on the infected computer and am writing from a second.

Stu Rootkit Eradicator
Rootkit Eradicator
Stu
Posts: 5,210
Registered: ‎04-08-2008

Re: worm.win32.netbooster

Ok Let's try something and let's see if we can do this the easy way.

 

Please download Malwarebytes' Anti-Malware from Here

Double Click mbam-setup.exe to install the application.
  • Make sure a checkmark is placed next to Update Malwarebytes' Anti-Malware and Launch Malwarebytes' Anti-Malware, then click Finish.
  • If an update is found, it will download and install the latest version.
  • Once the program has loaded, select "Perform Quick Scan", then click Scan.
  • The scan may take some time to finish,so please be patient.
  • When the scan is complete, click OK, then Show Results to view the results.
  • Make sure that everything is checked, and click Remove Selected.

Than

Please download SuperAntispyware from Here , the free version will do the trick

Double Click superantispyware.exe to install the application.
  • Just download it to your desktop, then click Finish.
  • If an update is found, it will download and install the latest version.
  • Once the program has loaded, select "Check for updates" just to be sure you are fully up to date
  • Once the program has loaded, select "Scan your computer", then click Perform complete Scan .
  • The scan may take some time to finish,so please be patient.
  • When the scan is complete, Superantispyware will show all the results.
  • Make sure that everything is checked, and click Remove Selected.

 

 

Lets hope this easy way will help.

please let us know

"All that we are is the result of what we have thought"
Newbie
fisherman56
Posts: 4
Registered: ‎04-13-2008

Re: worm.win32.netbooster

go to my post on worm.win32net booster from STU his solution solved my problem in less than an hour
Newbie
fisherman56
Posts: 4
Registered: ‎04-13-2008

Re: worm.win32.netbooster 2

go to my post on worm.win32net booster from STU his solution solved my problem in less than an hour
Symantec Employee
orla_cox
Posts: 29
Registered: ‎04-08-2008

Re: worm.win32.netbooster 2

The symptoms you describe are related to a misleading application which we call SpywareIsolater.

 

This application will display false or misleading reports of threats on your machine. It appears that this software has been recently updated to evade detection, so we've added new definitions for it today. The next time you run LiveUpdate it will download these new definitions. I'd recommend that you a full scan after applying these new defs.

 

These misleading applications are often associated with other threats such as Downloader.MisleadApp and Trojan.Vundo. We update our detections for these on an almost daily basis. If, after running a full scan, there are still no threats detected then follow the instructions here to see if you can find any suspicious files loading. These files can then be submitted for analysis here.

 

I hope this helps

 

Orla Cox

Symantec Security Response 

Regular Visitor
dhcarstens
Posts: 9
Registered: ‎04-15-2008

Re: worm.win32.netbooster

Unfortunately, your message came too late.  The system crashed and I am unable to restore the operating system (still trying various options).  I haven't quite got to a full hard drive format, but I am about there.

 

 

Stu Rootkit Eradicator
Rootkit Eradicator
Stu
Posts: 5,210
Registered: ‎04-08-2008

Re: worm.win32.netbooster


dhcarstens wrote:

Unfortunately, your message came too late.  The system crashed and I am unable to restore the operating system (still trying various options).  I haven't quite got to a full hard drive format, but I am about there.

 

 


Please try my option and see what it can do for you
"All that we are is the result of what we have thought"