I've got Worms!

[Simon Site Manager]

Hi Guys,

Have a worm that fires off an e-mail through my hotmail account to my whole address book. Any ideas how to get rid of it? I am scanning with Microsoft Security as we speak.

Thanks,
Simon

[thescruff]

new-email-worm-on-the-move-t33668.html

[Simon Site Manager]

Hi Scruff,

Doesn't do naughty films, just some shopping offer for www.moooa66.com which I dare not click on

S

[thescruff]

The guys will tell you how to get rid of later when they get in.

[chat_to_rich]

Let Microsoft Security Essentials (MSE) do its scan. If it doesn't pick anything up, or doesn't remove the worm, uninstall MSE and give one of the other free anti-virus packages a go, e.g. Comodo http://www.comodo.com/home/download/dow ... =antivirus or AVG http://free.avg.com/gb-en/homepage Then to be extra safe scan with Malware Bytes and SuperAntispyware http://www.superantispyware.com/download.html http://www.malwarebytes.org/mbam.php Also change your Hotmail password.

[Simon Site Manager]

Was a program called Exploit! I presume it came in as a Java update.


Exploit:Java/CVE-2008-5353.BO (?)

Encyclopedia entry
Updated: Aug 13, 2010 | Published: Jul 28, 2010

Aliases


Exploit.Java.Agent.t (Kaspersky) Exploit.Java.46 (Dr.Web)

Alert Level (?)
Severe

Antimalware protection details
Microsoft recommends that you download the latest definitions to get protected.
Detection initially created:
Definition: 1.85.1321.0
Released: Jul 02, 2010


S

[chat_to_rich]

I'd do another scan just to make sure it's definately gone. If the second scan comes up clean you're problably good to go. Remember to change your Hotmail password. Also, clean out your System Restore points and create a fresh one. That way you won't re-infect yourself if you do a system restore.

[Simon Site Manager]

Hi Rich,

Thanks for that, changed my hotmail password, downloaded super anti spyware which found 164 Adware cookies (only 7 on my user account!, the rest on the misses's!).

Cheers!
Simon

[Simon Site Manager]

Hi Rich,

I am creating a back up, how do I delete previous ones?

Thanks,
Simon

[chat_to_rich]

Create a new one first, then do this http://www.winxptutor.com/srclear.htm

[Simon Site Manager]

Thanks Rich!

Simon