Need help with removal of W32.Wallz Worm

Discussion in 'Malware Help (A Specialist Will Reply)' started by charmed74k, May 2, 2005.

  1. charmed74k

    charmed74k Private E-2

    Hi, i cant seem to get rid of this one. I have Xp, Norton Antivirus and Norton Internet Security. I also have several addware and spyware removal programs, all wich cant seem to remove this worm. I have tried disabeling my system restore and then running all the prgrams and it still isnt getting rid of it. Anybody got any ideas?
     
    charmed74k, May 2, 2005
    #1
  2. chaslang

    chaslang MajorGeeks Admin - Master Malware Expert Staff Member

    - Run ALL the steps in this Sticky thread READ ME FIRST BEFORE ASKING FOR SUPPORT: Basic Spyware, Trojan And Virus RemovalMake sure you check version numbers and get all updates.

    - Very Important: Make sure you tell us the results from running the tutorial...was anything found? Were you unable to complete any of the scans?...Were you unable to download any of the tools?...Did you do the on-line scans as suggested? etc.
    Download and install Microsoft® Windows AntiSpyware and make sure you get the updates but do not run a scan yet.

    Now reboot into safe mode with no network support, make sure you have no browsers opened and then run a full scan with MS Antispyware and let it fix what it finds.

    Now reboot into normal mode.



    After doing ALL of the above you still have a problem:

    - Download HijackThis 1.99.1

    - Unzip the hijackthis.exe file to a folder you create named C:\Program Files\HJT

    - Do NOT run Hijack This from the Desktop, a temp folder, or a sub-folder of C:\Documents and Settings, or choose to run it directly from the downloaded ZIP file.

    - Before running HijackThis: You must close each of the following:your web browser, e-mail client, instant messenger, and programs like notepad, wordpad, MS Word etc. And any other unnecessary running programs.

    - Run HijackThis and save your log file.

    - Post your log as an ATTACHMENT to your next message. (Do NOT copy/paste the log into your post).
     
    chaslang, May 3, 2005
    #2
  3. charmed74k

    charmed74k Private E-2



    Thank you! Thank you! Thank you! lol. We followed your instructions in the read me first before asking for support thread (which i am ashamed to say i didnt do :(.) We downloaded all of the programs (which all downloaded well, even on a modem connection). We put our computer into safe mode and ran all the tests you suggested. The program that got the W32.Wallz worm was Macafee Stinger. But i must add that it also found three more we were unaware of. And we ran the other programs as well just for back up and they found several spyware and addware as well that even Stinger didnt find. We are very dissapointed in Norton lately. "When" it find problems it either cant fix them or cant remove them. We did try to do the online scans, but couldnt connect to the internet in safe mode for some reason.... I want to thank you so much for the advice, both in the thread i should have read first (duh) and the answer thread to this post. I am an active member of YIF and your site has a great reputation there since we all surf a lot of sites. Thank you and i consider myself well taught to keep many different protection programs at work all the time. You guys are good! Thanks again :) :D You have taught us well :)
     
    charmed74k, May 4, 2005
    #3
  4. chaslang

    chaslang MajorGeeks Admin - Master Malware Expert Staff Member

    With a dial up connection you cannot connect in safe mode. The READ ME tells you to run the online scanners in normal boot mode if for any reason you cannot run them in safe mode. You would be surprised what they find sometimes on a supposedly clean system.

    To make sure you are clean, you really should post the follow up HijackThis log as requested.

    Also after we are sure you are clean the steps in the below link are recommended to help keep you clean:

    How to Protect yourself from malware!
     
    chaslang, May 5, 2005
    #4
  5. charmed74k

    charmed74k Private E-2

    The reason we didnt do the hijack option is because it said to do it if you still had a problem, which all that you told us to do fixed, so we didnt feel it was needed. I spoke to my husband and he feels uncomfortable with the Hijackthis thing...he doesnt like the idea of attaching that type of information from our computer... although to be honest its just code to me. But i trust him so i am afraid i agree, but i still thank you dearly for your time and advice. We are following the other practices to keep the computer safe as well. And i hope you dont mind if we ask your advice again if we ever have a problem we cant handle by the wonderful posts you have here. Thanks again
     
    charmed74k, May 7, 2005
    #5
  6. chaslang

    chaslang MajorGeeks Admin - Master Malware Expert Staff Member

    That's okay! It's your decision but HijackThis does not reveal any personal information. And you're welcome.
     
    chaslang, May 7, 2005
    #6

MajorGeeks.Com Menu

Downloads All In One Tweaks \ Android \ Anti-Malware \ Anti-Virus \ Appearance \ Backup \ Browsers \ CD\DVD\Blu-Ray \ Covert Ops \ Drive Utilities \ Drivers \ Graphics \ Internet Tools \ Multimedia \ Networking \ Office Tools \ PC Games \ System Tools \ Mac/Apple/Ipad Downloads

Other News: Top Downloads \ News (Tech) \ Off Base (Other Websites News) \ Way Off Base (Offbeat Stories and Pics)

Social: Facebook \ YouTube \ Twitter \ Tumblr \ Pintrest \ RSS Feeds