W32 worm?

[Sadie5]

Something has taken over my laptop. This scanner comes up and tells me I have this W32 worm and several files show up on the screen. I use AVG so I can tell it is not my free antivirus. To get it to go away you have to enroll in this program for $69.00. It refuses to let me get on the internet or to do much of anything else. I tried to get into regedit but it stopped me from doing that too. How do I get rid of it? Any ideas? TIA

[canetoad]

1. This is a nasty one

There are numerous 'Win32' worms some of which prevent you from installing clean-up programs.
Read this recent thread http://www.democraticunderground.com/discuss/duboard.php?az=view_all&address=242x34334

You need another computer, a flash stick, knowledge how to boot your machine into safe mode. This usually involves tapping the F8 key as it boots and following the prompts.

On the 'safe' computer, download the Malwarebytes AntiMalware program and load the installer onto your flash stick.

Boot your infected machine in safe mode. Plug in the flash drive and install Malwarebytes. Still in safe mode, run a full Malwarebytes scan and delete everything it finds. This can take some time, be patient.

When finished, reboot into normal mode. Update Malwarebytes definitions file then run another full scan, deleting everything it finds.

You should be good to go.

[Sadie5]

2. thanks for the reply

I appreciate all of your help. Will get started now.

[whistler162]

3. Nasty piece of S**T... good advice in the other post but

what I usually do, work related(6 or 7 PC's), is start in Safe Mode and do a system restore before running the default A/V scanner and MalwareBytes. I also clear IE's Temporary Files.

Hopefully you can do a system restore I have seen versions of this crap that destroys the system to the point that system restores don't run.

good luck

[canetoad]

4. I can pretty well guarantee that

System Restore will not fix this one.

As mentioned in the other thread, it's advisable, after cleaning this infection, to delete all restore points as you risk restoring the worm too.

[whistler162]

5. If it can be accessed system restore has worked for

me in the cases I have cleaned up of the pay us or we destroy your PC A/V.