Help please with Blackworm virus

shopaholicjules

My friend has recently got a computer and has been using it. Tonight it says that she has the blackworm virus and there are hundreds of serious threats to her computer.
Any ideas on what she should do or protection she should download, free ones would be good.
Neither of us is very technically minded so please if you could in laymans terms.
Thanks in advance
Jules

albertross_2

http://forums.moneysavingexpert.com/showthread.html?t=133269

http://safety.live.com/site/en-gb/default.htm

If you aren't patched, update at https://www.windowsupdate.com

which A/V detected it? If you have got this message from a webpage popup, it could be misleading.

http://isc.sans.org/diary.php?storyid=1067

Quincy_3

Its the MY Wife Variant by the looks of it.

Download stinger and run it, but turn off restore first run a scan then do the scan then turn restore back on.

http://vil.nai.com/vil/stinger/

shopaholicjules

Thankyou for the advice. She is now on the windows safety site and is trying to do a full scan. It is saying that it cannot do it because either she has to make sure she has choseb to install the activeX control for the scanner or make sure she is logged on to PC as an administrator or make sure she has at least 20mb of free space on hard disk.
Sorry for being so naive but we don't understand what this means.
Please help

Quincy_3

shopaholicjules wrote:

Thankyou for the advice. She is now on the windows safety site and is trying to do a full scan. It is saying that it cannot do it because either she has to make sure she has choseb to install the activeX control for the scanner or make sure she is logged on to PC as an administrator or make sure she has at least 20mb of free space on hard disk.
Sorry for being so naive but we don't understand what this means.
Please help

Well I would of run stinger first :rolleyes: Nevermind tho.

I User accounts in Control Panel she has to have an admin account not a limted one, and only a admin account holder can change an account type.

albertross_2

Is there an activex popup at the top of the screen, click on it.

Also, try stinger, as suggested by Quincy

shopaholicjules

She came out of the microsoft one and went to run the stinger, what showed as the instructions on the screen wasnt what came up. On screen she has install pkg, packing.lst. pkg catalog, sng256.nap, sng256det... and sting pkg.
When she goes into install, she said yes to open file and it says cannot open file as windows needs to know what created it. She clicked on for it to find where automatically and all these things have come up.
Its all far too technical for the two of us and think she may be best getting someone in who knows what they are doing.
Thankyou for your advice.
Jules

Quincy_3

Stinger Download File

Ok Download and Install it but dont run it just yet, first off all turn off system restore, instructions here now run stinger then after scan turn restore back on, very simple.

thyme_2

Quincy,

I don't need any help thankfully, but I looked up the info you said - nice and clear I should think and hope they will be able to sort things out. Well done on being helpful to newby computer users and the other helpers it is nice to see. Have some beers!:beer: :beer: :beer: :beer:

shopaholicjules

Thankyou, she has ran stinger and there are 143826 clean files, 8 infected files, 1 repaired file and 5 deleted. Hopefully that will have helped.
Jules

Browntoa

to make sure I would still follow

http://forums.moneysavingexpert.com/....html?t=133269

running in "safe mode" ensures that stuff gets deleted properly

you only need to read posts 1 to 4 and in you case maybe only run Ewido in safe mode