Jump to content

Welcome to Geeks to Go - Register now for FREE

Geeks To Go is a helpful hub, where thousands of volunteer geeks quickly serve friendly answers and support. Check out the forums and get free advice from the experts. Register now to gain access to all of our features, it's FREE and only takes one minute. Once registered and logged in, you will be able to create topics, post replies to existing threads, give reputation to your fellow members, get your own private messenger, post status updates, manage your profile and so much more.

Create Account How it Works
Photo

Some kind of worm - I think it's New Poly


  • Please log in to reply

#1
s302

s302

    New Member

  • Member
  • Pip
  • 1 posts
Hi everyone

My laptop has at least one virus on it right now. If I leave it connected to the internet I get a whole series of notifications from McAfee about potential worm activity, sending spam emails out. This gets a lot worse, because I don't use any email accounts set up on there, so I'm guessing someone else has checked their emails on there and the login details are saved somewhere.

Anyway, on the notifications, it said that the worm involved was W32/New Poly (or however it's written).

I also had a whole load of files create themselves on my C drive, with such names as 68.tmp, 69.tmp etc. I deleted these.

I now have a file on my C drive called cd1041.nls, which I don't recognise as having been there before. I can't delete it because it says it's either write-protected or in use (it's not read-only, so I'm sure some program is running it in the background).

Also, the McAfee icon in the bottom corner of the screen has turned to black, suggesting that VirusScan is disabled, and I can't get it to re-enable.

I ran Spybot, and it came up with the usual tracking cookies, but also a program file, and some registry entries I'd never seen it come up with before. It fixed them all, and I re-connected to the internet. Unfortunately this had not solved the problem, and it sent a whole load more emails before I could disconnect it again. Running Spybot again showed some of the registry entries etc had come back again (or not properly deleted the first time I guess).

I've thought about maybe doing a System Restore, to take it back to the way it was a couple of days ago - would that be the right thing to do? If not, please give me any advice you can, and I'll be really grateful.

Thanks very much.
  • 0

Advertisements


#2
coachwife6

coachwife6

    SuperStar

  • Retired Staff
  • 11,413 posts
Please Click here!, and follow the recommendations in the guide.

If you're still having trouble, We'll need you to use a free diagnostic tool, Hijack This. Follow the instructions in step five of this guide, and reply here with your log.

Most of what Hijack This lists lists will be harmless or even essential, DO NOT delete or modify anything yet! Someone will be along to tell you what steps to take after you post the contents of the scan results.
  • 0






Similar Topics

0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users

As Featured On:

Microsoft Yahoo BBC MSN PC Magazine Washington Post HP