The Doc
|
| posted on 28/9/08 at 08:03 AM |
|
|
Netbooster Removal
Hi folks,
I've managed to get 'Netbooster' on my PC. Anyone got ideas for removal?
Normal anti-virus progs don't work on it
Mike
Q: Who wants to live until they're 80?
A: Someone who's 79
|
|
|
|
|
YQUSTA
|
| posted on 28/9/08 at 08:23 AM |
|
|
from a google search not my own knowlage.
Best Answer - Chosen by Asker
You have unwittingly launched a very nasty Smitfraud program that is falsely reporting "worm.win32.netbooster" as the infection. Smitfraud
applications are programs that are used to download rogue security products and change the user's desktop to display false warnings that the
computer is infected with spyware.
If your computer has become infected with one of these "spyware removal programs," you probably downloaded an infected codec program when
you tried to watch a video online (usually purporting to be an x-rated celebrity video) or you may have been hit by a "drive-by"
installation of Smitfraud.
Smitfraud attacks show fake antispyware programs popups on your screen and/or a balloon popup from the windows system tray displaying a warning
message that your computer is infected with spyware (here it is falsely calling it worm.win32.netbooster) and telling you to purchase, download &
install their program to remove it. Often, it will hijack your desktop and publish a warning message in big letters (with their weblink) on your
desktop wallpaper. The infection will usually alter the settings of your current virus protection software (including Norton and McAfee) and render it
powerless to delete the infection. The Smitfraud application will also typically disable your ability to launch the task manager with the alt-ctrl-del
keys, too.
DO NOT BUY THE ANTISPYWARE PROGRAM THAT IS BEING ADVERTISED ON YOUR WALLPAPER AND IN THE POPUPS. The creator of the bogus popups is an affiliate of
the particular antispyware program they are promoting, so each time an unsuspecting user purchases the advertised program in hopes of removing the
trojan the person behind the attack gets paid. Not a very ethical way of selling an antispyware, antivirus, or other computer pest removal product.
Here is the 100% FREE solution I found on http://www.bleepingcomputer.com that worked for me:
1. Download and install the Smitfraudfix tool in the link below.
http://siri.urz.free.fr/Fix/SmitfraudFix...
2. Download and install Super Antispyware. Update definitions.
http://www.superantispyware.com/
3. Run both programs (Smitfraudfix first) after you start your operating system is in safe mode. Follow the instructions carefully for Smitfraudfix.
Allow Super Antispyware to quarantine whatever it finds.
To learn how to run your operating system in safe mode:
http://www.bleepingcomputer.com/tutorial...
3. Reboot in normal mode. Run the Bit Defender online scan (no download necessary). Allow it to quarantine whatever it finds.
http://www.bitdefender.com/scan8/ie.html
4. Download and run RogueRemover. Select "Scan" and follow the steps indicated. It didnt find anything for me, but it comes highly
recommended.
http://www.malwarebytes.org/rogueremover...
You can continue to follow-up with Spybot and AdAware if you desire. Of course, you should also keep your regular anti-virus software up-to-date and
scan regularly; hopefully it will be working well again after the infection is removed. Be sure to restore the settings which the Smitfraud program
altered. Smitfraud apps are quite nasty, and it may take a while to remove all traces.
Good luck!
YQUSTA
|
|
|
ReMan
|
| posted on 28/9/08 at 08:32 AM |
|
|
It's particularly nasty and hard to get rid of.
There is information and tools on the net as above.
But it may take some patience to finally rid yorself of it. 
|
|
|
