Problems after removed worm WIN32.NETSKY

January 1, 2010 at 08:59:33
Specs: Windows XP, Pentium M 760 (2.00Ghz w/ 533Mhz FSB, 2GB (2x1GB)
I recently started my daughters laptop to find a Windows Security window pop up prior to desktop starting up. It mentioned there is a Worm, WIN32.NETSKY that has infected my system, and that I should perform a full scan to remove the worm. I have McAfee on my computers so I contacted them for help. They concurred with the Windows suggestion. I did a complete scan of the system. 14 infections were found. McAfee quarantined them all and I deleted them. I re booted. After the Windows XP boot screen I got a standard blank screen with the shut down immediately going into process. It would restart and go through the same process again. Shutting down and restarting. I have found out through this site what the WIN32.NETSKY worm/virus is, i can imagine how it got into the computer, So how do I fix this? I might also add the computer will NOT let me enter safe mode. So at this point I can do nothing but go through an eternal reboot! Also I can't figure out weather I removed the worm or not!
Thanks in advance, Tom

See More: Problems after removed worm WIN32.NETSKY

Report •

#1
January 1, 2010 at 09:22:05
What happens when you boot in safe mode ?

Google is your friend

www.google.com

-----------------------

Keyboard not present,press F1 to continue...


Report •

#2
January 1, 2010 at 09:26:08
"I might also add the computer will NOT let me enter safe mode".

Are there personal files that you need to copy/ backup?


Report •

#3
January 1, 2010 at 09:29:53
"I might also add the computer will NOT let me enter safe mode".

That one was written AFTER I asked if safe mode works....

If you have XP CD, try a repair installation....

Google is your friend

www.google.com

-----------------------

Keyboard not present,press F1 to continue...


Report •

Related Solutions

#4
January 1, 2010 at 09:34:51
I have tried several times to enter safe mode, both w/ and w/ out networking. No good. I also read where trying to enter as administrator can get you in, but I get the same response.

Report •

#5
January 1, 2010 at 09:38:40
1- yes there are files I need. Using the XP cd for repair will lose all my data, correct? 2- Using the repair may not remove the virus either, is this also correct?

Report •

#6
January 1, 2010 at 09:40:07
2. The repair installation will leave your data intact & remove the virus for sure !

Google is your friend

www.google.com

-----------------------

Keyboard not present,press F1 to continue...


Report •

#7
January 1, 2010 at 09:45:41
Do you have a full version WinXP CD or a restore disk you made from the files on the computer?

Report •

#8
January 1, 2010 at 09:51:45
Look at the link below for more info on that infection. IMO it is always preferable to install fresh. As the link indicates there are many variants of that worm. Some make your computer a bot for mass mailings.

If you have a full version CD of WinXP there are some methods to try and fix the installation so you can then boot to XP. Once there you can decide if you want to perform a clean install or not. If you have a restore disk then you don't have the same options.


Report •

#9
January 1, 2010 at 10:14:38
The only way to the disk is pressing F12. This gets me to a point of asking for an admin password... I never created one!

Report •

#10
January 1, 2010 at 10:19:34
The only way to the disk is pressing F12

NO !!!

Go to BIOS and change the boot order & set the CD-ROM first....then you`ll be prompted to boot from CD....

Google is your friend

www.google.com

-----------------------

Keyboard not present,press F1 to continue...


Report •

#11
January 1, 2010 at 10:28:35
I forgot to include the link but it is of no importance now. You have indicated you are using restore disks.

As far as a password goes, did you try just hitting the Enter key?

You could try recovering personal data by using recovery software or a live version of Linux, like Knoppix.

I don't wish to get into a argument with probsolver but many recovery installations are destructive, which means all is lost including any person files, profiles, users, service packs, etc.

If that is the only recourse then I suggest you first attempt to copy any personal files. You will need a place to copy the files to.

Look below for some links to recovery software. You will need to run them from a bootable disk.

PC Inspector (freeware)
http://www.snapfiles.com/get/pcinsp...
Zero assumption Recovery
http://www.z-a-recovery.com
The demo is limited
It will only recover 'up to' four folders per run
But you can make multiple runs
IMO the best, but not free
GetDataBack
http://www.runtime.org/

I can also provide a link to Knoppix (linux) if you wish. Knoppix is a very large download. Depending on how many files you need to recover Knoppix may or may not be the better choice to use.

If you have a full version of WinXP of the same type (home or pro) that you can borrrow you could try to repace the missing files so you could boot.


Report •

#12
January 1, 2010 at 10:34:48
probfixer hitting F12 on a Dell brings me to the same point. I am however stuck at the Amin point. Yes I tried just hitting enter, no good.

Report •

#13
January 1, 2010 at 10:37:19
otherhill thank you, I will try window fix first. If no good, I will go through more extreme methods, as you suggested.

Report •

#14
January 1, 2010 at 10:45:06
Are you going to borrow a full version WinXP home? CD? Do you know what to do with it? Look below.

http://support.microsoft.com/kb/314058


Report •

#15
January 1, 2010 at 10:56:28
Still looking how to get beyond administrative password!

Report •

Ask Question