Computer Virus/Worm Question.

Question

My dad has clicked on a link in an email that seems to have been some kind of virus. i don't know exactly what he did as he can't really remember! I am pretty good with computers, but don't really know anything about viruses...so am not sure what I am dealing with. He uses AVG and it has detected the problem as I-Worm/Nuwar.V . I Googled the name but only found this page http://www.virustotal.com/analisis/327b65afddb3fe28aebd1d4896e25031

which shows that one as a result of AVG...but I am not sure of the connection, if anyone could explain that? Does it mean that AVG caused it or just that that is what it is called when it shows up with AVG.

Anyway I really just want to know how serious the virus is and if you need to go to any special measures to get rid of it...or will AVG take care of it easily?

Thanks in advance:)

Answer 1

Depend on action of AVG, if it said the virus is moved to the vault, then its isolated.

You can also run an online scanner that doesnt require installation

http://housecall.trendmicro.com

It should help you to identify anything else that may be infected but missed by AVG

Answer 2

Download and run spybot and superantispyware

Answer 3

I use both AVG and Avast.  Different antivirus programs have different databases - one program may detect a virus/worm/trojan that another program may miss.  The above site you mentioned just shows that AVG is one of the antivirus programs that has detected this particular worm and that is because AVG is set to scan your incoming email and email is probably the most common method used to infect computers with this worm.  Having said that, if AVG detected the worm then it will have taken care of it.  Look in the AVG vault and you should find it there - that also means that your computer is safe.  You should also read the AVG Help Topics to learn how AVG deals with any infections detected.  AVG detected a worm on my computer and I didn't have to do anything; AVG acted immediately and took care of the problem.  After you have opened AVG and looked in the vault and studied the Help Topics, please let me know if you have any further questions and I will try to help you.

Answer 4

STEP 1. boot up into "Safe Mode". while boot up is proceeding,press f8

till you get the "Safe Mode",Normal and a few other options. choose safe mode. do NOT choose safe mode with connectivity,\

as you do NOT want to be online yet.

STEP 2. TURN OFF SYSTEM RESTORE

1. Turn off Windows System Restore Points:

a. Right Click on My Computer

b. Click Properties

c. Click System Restore Tab

d. Check the box next to: Turn off System Restore on all Hard drives

i. Malware can sometimes be restored from previous restore points, this will help the removal process run more smoothly

2. Click Apply and OK

STEP 3. clean up using internet options.start--control panel--internet options--general:

delete cookies/history/temp files from internet options general page.cookie management: start--control panel--internet options--privacy--advanced--override

select: allow 1st party cookies,BLOCK 3rd [ tracking ] party cookies

STEP 4. clean up windows folders: empty prefetch and temp file folders: start--control panel--local disk drive (c)--temp folder--

file--select all--press delete key on keyboard.back out of Temp folder and continue to Windows folder

open Windows folder,open the 2nd Temp folder and repeat steps as in 1st Temp folder

back out of that folder and continue to Prefetch folder.repeat steps with Temp folders.close

STEP 5. REMOVE PROGRAMS ADD/REMOVE PROGRAMS

GO TO ADD/REMOVE PROGRAMS TO CLEAR KNOWN MALWARE

1. Before scanning the computer you can remove certain malware programs from the Add/Remove Programs list in the Control Panel in Windows XP

2. Open the Start Menu and select Control Panel

3. In the Control Panel, select Add or Remove Programs

4. Look through the list for anything suspicious

5. Uninstall and follow the directions on any program that you decide to remove.

STEP 6. CLEAN UP USING DISK CLEAN

start--all programs--accessories--disk clean

STEP 7. CLEANING UP THE TASKBAR

right click start--select properties--select taskbar--select customize.select always hide or show

STEP 8. edit the registry:

VERY TRICKY AND DANGEROUS! NOT FOR BEGINNER OR RUBE!!

press windows key [ 4 part flag ] + letter R--enter

regedit

there are 4 key sections to check:

hkey_classes_root

check the list for program--delete

hkey_current_user

check for program--delete

click software--get program--delete

click microsoft--get program--delete

hkey_local_machine

check for program--delete

click software--get program--delete

click microsoft--get program--delete

hkey_users

click default

click software

click microsoft--get program--delete

STEP 9. ok ! now it's time to reboot and allow normal boot up.once connected,download and install the freeware listed. update each and THEN run.

Trojans, Worms, Key Loggers, Viruses, and Spyware are all very difficult to remove with just a single program. That is why it is recommend to run several programs to aid in the removal process. I recommend running each of the following programs listed below in order. Not all the programs are freeware and require purchase, you don’t have to run that program but I recommend looking into it if the results come back with your computer still being infected. Still, after all the freeware programs have run through your computer should be clean of any infection.

NOTE: It is recommend to run these programs in Safe Mode for the best results!

1. Freeware – Spybot: This one gets a lot of advertising bots and other malicious programs.

http://www.safer-networking.org/en/index...

2.Spyware Blaster: This is a powerful utility that helps to block potential spyware problems from browsers and websites.

http://www.javacoolsoftware.com/spywareb...

3. avast ! 4 Home Edition - FREE anti virus software - Download -

http://www.avast.com/eng/download-avast-...

STEP 10: TURN ON SYSTEM RESTORE

1. Turn on Windows System Restore Points:

a. Right Click on My Computer

b. Click Properties

c. Click System Restore Tab

d. Uncheck the box next to: Turn off System Restore on all Hard drives

2. Click Apply and OK

STEP 11: SYSTEM RECOVERY

1. In a worst case scenario if the following steps do not clean your system,try using system restore

follow the same steps you followed to turn off S.R. but instead,click create new restore point

2. in a VERY worst case,use your recovery or re install disk to re install windows

please don't forget to choose Best Answer

this answer has been selected as Best Answer 73 times

Answer 5

I'm not a fan of AVG but make sure that it is fully updated and then run a FULL scan.

Nuwar.V is also known as Storm Worm, which caused chaos when it first appeared in 2007.

Now the majority of antivirus programs will remove it.

You can also scan with Trojan and Worm Remover:

http://www.simplysup.com/tremover/downlo...

The program will work for a full 30 days as a full version, after which it will expire and you can then uninstall it.

More details:

http://cotojo.wordpress.com/2008/03/07/t...