URGENT - Virus On Computer

Dreaded_Cheese · 16 May 2008 at 09:43

This virus has been on my computer since wednesday and i dont know how to get rid of it, the virus name is "worm.win32.netbooster",
i have ran 3 seperate virus scans defeagged and also disk clean up and i cannot accesss the internet at all, also messages keep on coming up every 5 mins saying would i like to remove the virus i click yes and nothing happens,
so can you help me?
Thanks

bledd · 16 May 2008 at 09:52

disable system restore on it

install and run these..

ccleaner slim
nod32 trial (should be ok without updates), if not, then try stinger
spybot s&d (can download the update file seperatly)
avg antispyware (remove it after..)

might need dial-a-fix to run after all's completed..

Dreaded_Cheese · 16 May 2008 at 10:53

One problem,
i am not able to connect to the internet well i am but it opens a site that i cant get rid of and its a site where the certain virus comes from,
i alreeady have AVG and Spybot search and destroy and have run both those scans and they are not able to delete it, at the moment i am connecting to the internet via my friends computer

izzy eckerslike · 16 May 2008 at 10:58

Worm.Win32.Netbooster (also know as Worm.Win32 or Netbooster) used to be a real virus, now fake anti-spyware software like IE Defender will display Worm.Win32.Netbooster as their scan result to trick user to buy the fake anti-spyware program. The fake anti-spyware program usually get installed onto your PC without your permission, through Trojan, malware and virus (or you could get it by installing a fake video codec). fake anti-spyware will display the Worm.Win32.Netbooster fake system alerts or fake security alerts to trick user to buy the Paid Version of the fake anti-spyware program.

The possible error messages are either “Your browser was hijacked by Worm.Win32.Netbooster”, or “Your browser was hijacked by Worm.Win32.Netbooster”. As discussed previously, these messages are completely misleading. You can safely remove Worm.Win32.Netbooster by following our manual removal instructions if you are familiar with regedit and dll files. Good luck!

Download SpyHunter* Spyware Detection Utility

Manual Worm.Win32.Netbooster Removal Instructions:

Unregister Worm.Win32.Netbooster DLL Files:
(Learn how to do this)
stream32a.dll
msvideo.dll
windivx.dll
websrc32.dll
mscfg32.dll
pdswin.dll
ecxwp.dll
pmspl.dll
vipextqtr.dll

Find and Delete these Worm.Win32.Netbooster Files:
(Learn how to do this)
mscfg32.dll
cjvy.dll
vtssp.dll
ttvbonvgl.dll
ssqppol.dll
gqagksr.dll
esent9.dll
pmspl.dll
windivx.dll
msvideo.dll
ecxwp.dll
stream32a.dll
websrc32.dll
mlljh.dll
urqnomm.dll

Remove Worm.Win32.Netbooster Registry Values:
(Learn how to do this)
c4545fc9-26d0-4ccf-b4fb-728aed895dbd
BBB05D9E-0297-404D-A6BF-D8F2876B84A6
F9EAAA11-DF98-4615-A2C7-7D03C86A6BE9
202EBB90-ABD4-46CC-BB5A-4F0ECC67B331
62EA9201-8CC7-4199-AC30-7744F836322E
b166be07-30a4-4d38-b781-44528a630706
D17CFF74-A19C-4C36-821A-E074E4F889CA
15EB9F40-D775-4463-B75B-8687B3C66BB7
E856E05E-1B91-4339-9EFC-9A3308CB5491
B3E45A9B-7756-46A2-AB14-90175CD374F9
69B98C68-D2B8-4A4E-9CB7-E85B6F3A7014
A8565FBC-8D53-4D4F-9BB0-CBC68A22B126
43BA0532-0D69-458A-8C71-AD0F6AE70D19
6D64B03B-3B93-4AF2-BFC6-01264A4C7F2A
6A719349-BDF5-4268-9019-4ACA0C2562D2

Dreaded_Cheese · 16 May 2008 at 11:02

Erm can you please tell me in a way i would understand as i am not exactly the biggest computer wiz i just wanna get this Thing off my computer
thanks for your help guys

Dolph · 16 May 2008 at 11:16

Here's the link to all the information, which includes 'how to' links.

http://www.xp-vista.com/spyware-removal/wormwin32netbooster-removal-instructions-netbooster

Dreaded_Cheese · 16 May 2008 at 11:31

Thanks guys, the netbooster virus or fake virus will it also change my homepage cause my homepage has been changed to some kind of virus page and i cant change it by changing my homepage as it dont work.

Dolph · 16 May 2008 at 11:32

Dreaded_Cheese said:
Thanks guys, the netbooster virus or fake virus will it also change my homepage cause my homepage has been changed to some kind of virus page and i cant change it by changing my homepage as it dont work.

Once you've followed the removal instructions, you should be able to change it.

Dreaded_Cheese · 16 May 2008 at 11:39

What removel instructions i just downloaded the program it told me to download and hoping that will do the work for me, i dont know a lot about computers that is why i said i couldnt understand what the website said like all the files.
Unregister Worm.Win32.Netbooster DLL Files:
(Learn how to do this)
stream32a.dll
msvideo.dll
windivx.dll
websrc32.dll
mscfg32.dll
pdswin.dll
ecxwp.dll
pmspl.dll
vipextqtr.dll

Find and Delete these Worm.Win32.Netbooster Files:
(Learn how to do this)
mscfg32.dll
cjvy.dll
vtssp.dll
ttvbonvgl.dll
ssqppol.dll
gqagksr.dll
esent9.dll
pmspl.dll
windivx.dll
msvideo.dll
ecxwp.dll
stream32a.dll
websrc32.dll
mlljh.dll
urqnomm.dll

Remove Worm.Win32.Netbooster Registry Values:
(Learn how to do this)
c4545fc9-26d0-4ccf-b4fb-728aed895dbd
BBB05D9E-0297-404D-A6BF-D8F2876B84A6
F9EAAA11-DF98-4615-A2C7-7D03C86A6BE9
202EBB90-ABD4-46CC-BB5A-4F0ECC67B331
62EA9201-8CC7-4199-AC30-7744F836322E
b166be07-30a4-4d38-b781-44528a630706
D17CFF74-A19C-4C36-821A-E074E4F889CA
15EB9F40-D775-4463-B75B-8687B3C66BB7
E856E05E-1B91-4339-9EFC-9A3308CB5491
B3E45A9B-7756-46A2-AB14-90175CD374F9
69B98C68-D2B8-4A4E-9CB7-E85B6F3A7014
A8565FBC-8D53-4D4F-9BB0-CBC68A22B126
43BA0532-0D69-458A-8C71-AD0F6AE70D19
6D64B03B-3B93-4AF2-BFC6-01264A4C7F2A
6A719349-BDF5-4268-9019-4ACA0C2562D2
<<< thats what i DONT understand

Master Skooter · 16 May 2008 at 12:48

Dreaded_Cheese said:
dont go on it as it is a virus website i think

Thanks for posting that potentially dangerous link :rolleyes:

Thanks for quoting it too.

bledd · 16 May 2008 at 13:02

might be easier to just bite the bullet and do a full format mate..

you'll have a clean system for sure then

(backup first)

sunderland · 16 May 2008 at 13:27

my nephew had this on and i used avira premium trial and it got rid of it no probs maybe try that m8

Ethics · 16 May 2008 at 14:41

bledd. said:
might be easier to just bite the bullet and do a full format mate..

you'll have a clean system for sure then

(backup first)

Till next time.... licenses for computer users!!

The site says "learn how to do this"? did you even google it? try and work it out for yourself?, the spyware is the lords way of saying use a pen and paper.

Dreaded_Cheese · 16 May 2008 at 18:37

Ok spyhunter wont remove the viruses unless i buy the full version, but it found them, quite annoyed now, what do i do next?

eXor · 16 May 2008 at 18:50

How on earth do people's computers catch these things?

What version of Windows are you running and are you running as Administrator?

Which browser do you use?

Which program do you use for e-mail?

Try Avast and schedule a boot time scan so that it can scan before Windows loads.

Your PC has been compromised and who knows what else is on there. If you do any kind of financial transactions on that PC, you should format and start afresh.

Dreaded_Cheese · 16 May 2008 at 19:25

well i think i got it off a website when i was browsing round surfing the web i use hotmail, windows XP and i am admin and so is another account, browser?
all that i want is to get rid of this stupid thing and to be quite honest i am getting quite a bit hacked off now,

Leporello · 19 May 2008 at 15:40

Browsing the web without taking precautions is like having unsafe sex. As you've discovered you get infected and there's a good chance that you'll infect your friends.

I'd suggest that you format your drive and re-install your system after you've learnt the rudiments of internet security. Surely you wouldn't wish to give your Grandma a nasty infection :eek: