Jump to content


 


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.


Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.

Photo

Virus Virus Virus Help Help Help


  • Please log in to reply
6 replies to this topic

#1 mnd1982

mnd1982

  • Deactivated
  • 21 posts
  • OFFLINE
  •  
  • Local time:10:04 PM

Posted 10 February 2007 - 11:39 PM

mY NOD 32 SCAN HAS SHOWN THESE VIRUSES IN MY HD BUT DIDN'T SHOW ME THE OPTION OF DELETING THEM PLEASE TELL ME HOW CAN I DELETE THEM

C:\Documents and Settings\Manmath\Local Settings\Application Data\Mozilla\Firefox\Profiles\nsw1ln6v.default\Cache\BFC5EFC9d01 »ZIP »crack.exe - Win32/Nuwar.gen worm

Moderator Edit: Moved topic to more appropriate forum. ~ Animal

Edited by Animal, 11 February 2007 - 03:13 AM.


BC AdBot (Login to Remove)

 


#2 fozzie

fozzie

    aut viam inveniam aut faciam


  • Members
  • 3,516 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Ossendrecht/The Netherlands
  • Local time:04:04 AM

Posted 11 February 2007 - 07:27 AM

Please undertake following steps :

* Clean your Cache and Cookies in IE:

* Close all instances of Outlook Express and Internet Explorer
* Go to Control Panel > Internet Options > General tab
* Under Browsing History, click "Delete".
* Click "Delete Files", "Delete cookies" and "Delete history"
* Click Close below.

* Clean your Cache and Cookies in Firefox (In case you also have Firefox installed):

* Go to Tools > Options.
* Click Privacy in the menu..
* Click the Clear now button below.. A new window will popup what to clear.
* Select all and click the Clear button again.
* Click OK to close the Options window

* Clean other Temporary files + Recycle bin

* Go to start > run and type: cleanmgr and click ok.
* Let it scan your system for files to remove.
* Make sure Temporary Files, Temporary Internet Files, and Recycle Bin are the only things checked.
* Press OK to remove them.

Than try to do the scan in Safe Mode

#3 quietman7

quietman7

    Bleepin' Janitor


  • Global Moderator
  • 51,474 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Virginia, USA
  • Local time:11:04 PM

Posted 11 February 2007 - 08:28 AM

Are you sure that NOD32 did not automatically remove the threat? Did you check the Threat Log for action taken or Quarantine folder?
.
.
Windows Insider MVP 2017-2018
Microsoft MVP Reconnect 2016
Microsoft MVP Consumer Security 2007-2015 kO7xOZh.gif
Member of UNITE, Unified Network of Instructors and Trusted Eliminators

If I have been helpful & you'd like to consider a donation, click 38WxTfO.gif

#4 mnd1982

mnd1982
  • Topic Starter

  • Deactivated
  • 21 posts
  • OFFLINE
  •  
  • Local time:10:04 PM

Posted 12 February 2007 - 05:23 AM

I am sorry for being replying late.My Internet provider was conducting some maintenance work. I followed all the step as suggested by fozzie.Now the virus is not present where it was now it has moved to some other location.
though nod 32 has renamed it but hasn't deleted it

previously it was in

C:\Documents and Settings\Manmath\Local Settings\Application Data\Mozilla\Firefox\Profiles\nsw1ln6v.default\Cache\BFC5EFC9d01 »ZIP »crack.exe - Win32/Nuwar.gen worm

now the nod 32 log says

C:\System Volume Information\_restore{91C1060B-1F83-4FA4-B69C-B418D627DC9E}\RP1\A0027604.Vexe - Win32/Nuwar.gen worm - unable to clean - renamed to C:\System Volume Information\_restore{91C1060B-1F83-4FA4-B69C-B418D627DC9E}\RP1\A0027604.VVexe

please tell me how can I remove it from my system.

Edited by mnd1982, 12 February 2007 - 05:24 AM.


#5 fozzie

fozzie

    aut viam inveniam aut faciam


  • Members
  • 3,516 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Ossendrecht/The Netherlands
  • Local time:04:04 AM

Posted 12 February 2007 - 05:46 AM

The easiest and safest way to do this is:

* Go to Start > Programs > Accessories > System Tools and click "System Restore".
* Choose the radio button marked "Create a Restore Point" on the first screen then click "Next". Give the R.P. a name then click "Create". The new point will be stamped with the current date and time. Keep a log of this so you can find it easily should you need to use System Restore.
* Then go to Start > Run and type: Cleanmgr
* Click "OK".
* Click the "More Options" Tab.
* Click "Clean Up" in the System Restore section to remove all previous restore points except the newly created one.

#6 mnd1982

mnd1982
  • Topic Starter

  • Deactivated
  • 21 posts
  • OFFLINE
  •  
  • Local time:10:04 PM

Posted 12 February 2007 - 06:29 AM

my restore point was turned off I turned it on for c drive only and followed what ever you suggested do you think it will work or should I use any special software.

#7 quietman7

quietman7

    Bleepin' Janitor


  • Global Moderator
  • 51,474 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Virginia, USA
  • Local time:11:04 PM

Posted 12 February 2007 - 10:14 AM

If you created a new restore point and purged the old ones, then rescan with NOD32. The scan results should show a clean system.
.
.
Windows Insider MVP 2017-2018
Microsoft MVP Reconnect 2016
Microsoft MVP Consumer Security 2007-2015 kO7xOZh.gif
Member of UNITE, Unified Network of Instructors and Trusted Eliminators

If I have been helpful & you'd like to consider a donation, click 38WxTfO.gif




0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users