win32.netbooster -Spyware

JUNIOR

Hi Folks

I have a win32.netbooster problem with my lappy,is there a sure way of getting rid :mad: .Tried AVG, Adware,Scans still there ,cant access internet,control panel,cmd promt.

Os -win xp

all help and assistance would be great and thanked:j

thomas01155

Did you try in safe mode Try superantispyware and malwarebytes
superantispyware
http://www.filehippo.com/download_superantispyware/
http://www.malwarebytes.org/mbam.php
install update scan
if its still not gone post a hijackthis log
http://www.filehippo.com/download_hijackthis/

thomas01155

Download these on another computer if the internet inst working
Malwarebytes Database
http://malwarebytes.gt500.org/database.jsp
Superantispyware Database
http://www.superantispyware.com/definitions.html

thomas01155

Also Run CCleaner
http://www.filehippo.com/download_ccleaner/

JUNIOR

thomas01155 i will try these tonight ,just downloaded both on works computer . can you tell me if this software is any good (win32 removel tool and reg cleaner) found it on yahoo answers . IF these dont work i will post hjt log .

thanks for your input :beer:

thomas01155

JUNIOR wrote: »

thomas01155 i will try these tonight ,just downloaded both on works computer . can you tell me if this software is any good (win32 removel tool and reg cleaner) found it on yahoo answers . IF these dont work i will post hjt log .

thanks for your input :beer:

Make sure to download the database def files if you cant get on the internet. I don't no how a reg cleaner will help you have you got the link to the site

JUNIOR

Good morning :rolleyes: everyone

Tried superantispyware would not let me update def files-firwall blocking cant access firewall settings .Ran a complete scan( 7HRS) found 38 infections and removed them . Problem still there (virus alert,no C/D drives visable, no control panel visable or CMD prompt), tried to to do system restore ,but it wont restore .

Didnt try win32 removel tool & reg cleaner
http://www.mixx.com/stories/225485/worm_win32_netbooster_removal_tool_at_malware_remover

thomas01155 can i download def files on works comp and transfer over to lappy

any ideas

JUNIOR

IS THERE ANYBODY ! WHO CAN HELP WITH THIS ISSUE PLEASE

pchelpman

Print off a copy of these instructions, and also save them to a Notepad file on your desktop, so they are easily accessible.

Download SmitfraudFix (by S!Ri) to a working computer.

Install it on to the infected computer, open the file and it will extract the contents (a folder named SmitfraudFix) to your Desktop.

Boot your infected computer into Safe Mode. (This is done by rebooting Windows and pressing F8 at boot/Windows startup, usually right after the beep.)

Select Safe Mode from the list.

Make sure you choose the option without Networking Support.

Open the SmitfraudFix folder.

Double-click smitfraudfix.cmd.

Select option #2 - Clean by typing 2 and press "Enter" to delete infected files.

You will be prompted : "Registry cleaning - Do you want to clean the registry ?"; answer "Yes" by typing Y and press "Enter" in order to remove the Desktop background and clean registry keys associated with the infection.

The tool will now check if wininet.dll is infected. You may be prompted to replace the infected file (if found); answer "Yes" by typing Y and press "Enter".

The tool may need to restart your computer to finish the cleaning process. If it doesn't please restart it into Normal Windows.

A text file will appear on screen, with results from the cleaning process; please copy/paste the content of that report into your next reply.

The report can be found at the root of the system drive, usually at C:\rapport.txt

Also post a HijackThis scan report log and let us know how the computer is operating now.

JUNIOR

Thanks pchelpman

Shall try this method tonight(at work right now:mad:) and report back .fingers crossed.
Will this make C & D drives and start menu re- appear ?

Thanks again for your help:beer:

pchelpman

JUNIOR wrote: »

Will this make C & D drives and start menu re- appear ?

Hopefully but let's just take one step at a time. As you have this one infection you may have others.

Once up & running you should use Superantispyware and Malwarebytes (links in posts above) to help fix anything else.

Whatever happens we must see a HJT log at a first step to fixing whatever else remains.

Good luck.