worm.win32.skynet

[davestar_delux]

Hi, my friend has a problem with his computer. Apparently his virus scanner has detected the above worm, his Internet Explorer appears to be being hijacked as well as it loads lots of pages at startup or whenever he tries to use it. It has pop-ups telling him to download pc cleaner and ultimate defender. He has came to me with these problems before so his PC is likely virus and spyware-riddled I reckon!

I said I would make him up a CD to sort it out for him, what should I put on it?

It has to be EASY TO RUN AND USE, I don't think the likes of Hijack This would be useful to him as he mess with stuff he really shouldn't.

I'm going to put Opera and Firefox on as well as AVG, Spyware S & D and try to download the updates for them so he can disconnect his machine from the net while he runs them.

 

[GSDog]

It sounds like he has a load of malware installed...

Was his antivirus able to repair or delete/quarantine the worm? If not, tell him to boot into safe mode and run another scan, it should be able to remove it.

I've dealt with that Ultimate Defender rouge program before -- I think it is usually installed by a trojan called Vundo or Zlob.

Smitfraudfix is a very good tool to remove Ultimate defender and other smitfraud infections.
See instructions and download here; http://www.precisesecurity.com/tools-resources/adware-tools/smitfraudfix/
I think it would be worth him running that in safe mode to see what it finds.

Another excellent program for removing all types of infections is SuperAntiSpyware. It has a free version and is highly effective.

Run the above programs with AVG-AS and Spybot S&D in safe mode and it should be sorted. If not, come back here and post a HJT log.