Help infected with worm

[Vadertitan]

I have a W32.Supova.Worm I have norton anti and I have deleted the worm and it still pops up. I scan my computer for it but it finds nothing. It pops up when my screen saver turns on. How do it get it to be totally off my system.

[Vile]

So have you updated your virus definitions and done a full scan with Norton? It still doesnt pick it up?

If not do this:

Update the virus definitions, and then restart the
computer in Safe mode. Run a full system scan, and delete
all files that are detected as W32.Supova.Worm.
If it exists, delete the value.


BTW, this one is mainly spread throuhg Kazaa

http://securityresponse.symantec.com/avcenter/venc/data/w32.supova.worm.html

[Noodles]

I actually have a friend that just got the SupNova.d or .b virus and it really isn't much 2 worry about. I think that this virus was downloaded through kazaa. Thry looking at Mcafee's website and do a search for it. you should be able to get sum good info there about it. Or you can look at the nortion anti-virus website and they will give you a more in-depth detail about the virus.

edit: Another suggestion that I have 4 you is to reformat your hardrives reinstall windows, without a network connection(by that I mean without an internet connection), and install norton right away just 2 make sure it doesn't come bite you again,

Also don't use cd's that you burnt when you had the virus, the virus may have been copied onto the cd.

[Zafiras]

more info here m8:

http://securityresponse.symantec.com/avcenter/venc/data/w32.supova.worm.html

hmmm what you been up to :p





When this worm runs, it does the following:

It copies itself to the C:\Windows\Media folder as the following files:

Britney spears nude.exe
Quake 4 BETA.exe
Windows XP key generator.exe
Windows XP serial generator.exe
Xbox.info.exe
DivX.exe
GTA3 crack.exe


and the list goes on

[Vadertitan]

Updated virus def. scanned in safe mode found nothing went to registry deleted supernova value as norton said and it still pops up when my screen saver turns on it says its in C:\System Volume Restore{bunch of numbers. There is no way I can reformat without screwing up my computer. I had a backup and did restored but it still comes up. Help!

[Vile]

Originally posted by Vadertitan
Updated virus def. scanned in safe mode found nothing went to registry deleted supernova value as norton said and it still pops up when my screen saver turns on it says its in C:\System Volume Restore{bunch of numbers. There is no way I can reformat without screwing up my computer. I had a backup and did restored but it still comes up. Help!

I would format if I were you.
Save your actual data, just make sure not to save the virus while you are at it, or any infected files.

Which operating system are you using? If using XP, just go into disk managment, and create a new parition, and save your data on that new parition, and format C:\ and reinstall. If you dont have XP, get Parition Magic and use that for the same procedure.

[Vadertitan]

I have XP but I don't have the disks so I wouldn't be able to install it again.

[Dr.MAD]

Don't you know anybody who has a boot disk? And as for installing Windows again... I'm afraid you'll have to buy it :( Don't you have an older version of windows (2000, or 98 or something)?

And indeed, I think best is to format the HDD before it gets any worse, and only backup the files of which you're sure they're not infected.

[Revelation]

XP can be boot from the CD. (Assuming you still have the XP CD)

[Dr.MAD]

Does it? didn't know that... I have the CD of my win 2000, but many people buy a computer with windows already installed and they don't receive the CD.

[toxic]

http://www.grisoft.com/html/us_faq.php?action=1&session=bebec96db4017b453a2d757fc4bc82bd#3

this link willl take you to the grisoft site the makers of avg antivirus
in xp trojans will hide inside the restore point so go to the link and look for the subheading entitled

Description for disabling restore function for Windows XP

hope this helps