Infected with Locksky.cm

Duis mollis, est non commodo luctus, nisi erat porttitor ligula, eget lacinia odio sem nec elit. Sed posuere consectetur est at lobortis. Vestibulum id ligula porta felis euismod semper. Donec ullamcorper nulla non metus auctor fringilla. Aenean lacinia bibendum nulla sed consectetur. Cras justo odio, dapibus ac facilisis in, egestas eget quam. Cras mattis consectetur purus sit amet fermentum. Morbi leo risus, porta ac consectetur ac, vestibulum at eros. Sed posuere consectetur est at lobortis. Etiam porta sem malesuada magna mollis euismod. Cum sociis natoque penatibus et magnis dis parturient montes, nascetur ridiculus mus. Duis mollis, est non commodo luctus, nisi erat porttitor ligula, eget lacinia odio sem nec elit. Cras justo odio, dapibus ac facilisis in, egestas eget quam. Aenean eu leo quam. Pellentesque ornare sem lacinia quam venenatis vestibulum. Curabitur blandit tempus porttitor. Sed posuere consectetur est at lobortis.

Please let us know if this does it for you. Otherwise we need to look for another solution

1 Like
My computer is infected with this email worm. It recreates itself whenever you remove it.
Has anyone had any success totally ridding their computer of this spyware?
Thanks! I'm desperate here!

Operating System: Windows XP Pro

Unfortunately, this did not work. The spyware still recreates itself even after disabling System Restore.


kmwaters wrote:

Unfortunately, this did not work. The spyware still recreates itself even after disabling System Restore.


 

Disabling system restore is one of 4 steps in the removal instructions.  Do you follow each in detail?   Did you remove the Run key in step 4?

Please try and download Malwarebytes http://www.malwarebytes.org/mbam.php

Update and run a full scan. See what happens

I would suggest doing a Full System Scan in Safe Mode.

1 Like

Let's start with the basics first:

 

1) What version of Norton are you running?  IE -Norton Internet Security 2008

2) What OS version and service packs are you running? - Windows XP Pro only?  SP2? SP3?

3) Did you run LiveUpdate and get the latest updates?

4) Did you do a full system scan?

5) Why do you think you have locksky.cm and what are you 'removing' it with?

6) Did you get any alerts in AV when you did then scan?  If so, please include those here.

 

Thanks,

Doctor Drive-By

Symantec Security Response

 

1 Like

 


kmwaters wrote:
My computer is infected with this email worm. It recreates itself whenever you remove it.
Has anyone had any success totally ridding their computer of this spyware?
Thanks! I'm desperate here!

Operating System: Windows XP Pro


 

Hi,

 

Bummer about the virus.

 

I noticed that you have cross posted this on a number of forums.

 

I can understand that you want help ... this is not a good way to get it.  We don't appreciate duplicating efforts.

 

 

You have told us next to nothing useful other than that you have XP PRO.  Please tell us:

(1) Service pack ... and have you update everything on the OS

(2) Do you have all your key files securely stored off the PC?

(3) How long has this been in your system?

(4) What can you tell us about it ...

(5) How did you get infected.

 

I noticed another forum user gave removal instructions and they appear not to have worked for you.

 

Where exactly are you up to ...?

 

Do you have NIS2008 or any Symantec product ... I don't wish to be rude but it's a bit rich posting on Zonelabs and Kapersky and Symantec when you may not have shelled out a cent on any commercial product.  If you are using a Symantec product then we can help you with it. 

 

Sorry ... if this sounds rough.  It's life.

 

Good luck, let us know how you went.

I appreciate everyone's help with this. It is truly frustrating. However, I do resent the tone of your reply, mcullet. If you don't wish to be rude, perhaps you could word your replies appropriately.

 

The duplicate posting is in fact because I have actually "shelled out" several "cents" on commercial products including Norton AV and ZoneAlarm Security Suite. Norton AV was on the computer (which is not mine) prior to the infection, but was allowed to expire. I installed ZoneAlarm after the infection and, while it identifies the infection, it does not successfully rid the computer of it. Seems to get in a loop as the spyware recreates itself indefinitely.

 

At this point, I am locked up to the point that I cannot access task manager or the internet. Therefore, I was unable to run LiveUpdate as suggested in Symantec's response. And, I do not have the registry entry indicated in the removal instructions provided by Symantec. In my registry, I have several entries of rundll32.exe with random filenames that recreate every time you delete the entry.

 

Someone gave me a copy of SpywareTerminator on a thumb drive and I'm going to try that next. Oh, and I did misspeak initially...the computer has Windows XP Home Edition, not PRO.


kmwaters wrote:
My computer is infected with this email worm. It recreates itself whenever you remove it.
Has anyone had any success totally ridding their computer of this spyware?
Thanks! I'm desperate here!

Operating System: Windows XP Pro


 

It goes under a number of names:

 

Also Known As: Win32/Loosky.{I, J, K, M, N} [Computer Associates], Email-Worm.Win32.Locksky.{r, t, ad} [Kaspersky Lab], W32/Loosky.gen@MM [McAfee], W32/Loosky-{L, S, AE} [Sophos], WORM_LOCKSKY.{F, G, V, Y, AB} [Trend Micro]

 

Norton deals with it on this webpage

 

 http://www.symantec.com/security_response/writeup.jsp?docid=2006-010517-1744-99&tabid=1 

 

and under the Removal Tab the first step is:

 

Disable System Restore (Windows Me/XP).

 

which stops Windows from restoring it as fast as you remove it.

 

So I suggest going to that Norton page and following the instructions.

 

Let us know how you get on, please.