« previous next »
Pages: [1]   Go Down

Author Topic: Win32.MyPict-Erma (Wrm) - WHO's KNOW THIS VIRUS CURE??  (Read 6032 times)

0 Members and 1 Guest are viewing this topic.

astia

  • Guest
Win32.MyPict-Erma (Wrm) - WHO's KNOW THIS VIRUS CURE??
« on: January 19, 2006, 10:40:39 AM »
Greeting to All Alwil Forumers,


              I have affected this kind worm within 7 hours ago...still searching the cure..but can't find any reference in Symantec,TrendMicro,Kaspersky..etc....anybody have any idea???
Logged

Offline FreewheelinFrank

  • Avast Evangelist
  • Ultra Poster
  • ***
  • Posts: 4871
  • I'm a GNU
    • Don't Surf in the Nude!
Re: Win32.MyPict-Erma (Wrm) - WHO's KNOW THIS VIRUS CURE??
« Reply #1 on: January 19, 2006, 11:01:52 AM »
My Pict-Erma seems to be avast!S unique name for the worm.

Can you tell us the name and location of the infected file detected?

And also submit the file to Jotti's multi-engine on line scanner, please.

http://virusscan.jotti.org/
Logged
     Bambleweeny 57 sub-meson brain     Don't Surf in the Nude Blog

astia

  • Guest
Re: Win32.MyPict-Erma (Wrm) - WHO's KNOW THIS VIRUS CURE??
« Reply #2 on: January 19, 2006, 11:10:29 AM »
This virus affected Malaysia,Asia. Its simptom like change most of the MsExcel (*.xls) into JPEG file (*.jpg)..but its end with (*.jpg.exe)...also found a batch file (Lafsia & Lesrma) in C:\WinNT (Win2k)  & C:\WINDOW (WinXP)


[update] from Jotti Scanner

Aliases : Worm/Fifi.AU,  Worm.Vb.Au,  I-Worm/VB.EG, Win32.VB.FiFi.AU@mm,  Win32.HLLM.Erma,   W32/VB.AU-mm, Email-Worm.Win32.VB.au,  I-Worm.VB
« Last Edit: January 19, 2006, 11:28:45 AM by astia »
Logged

Offline polonus

  • Avast Überevangelist
  • Probably Bot
  • *****
  • Posts: 34051
  • malware fighter
Re: Win32.MyPict-Erma (Wrm) - WHO's KNOW THIS VIRUS CURE??
« Reply #3 on: January 19, 2006, 01:53:17 PM »
Hi astia,

This is a new threat, known as Kama Sutra worm. Worm tries to corrupt anti-virus programs. Removal instructions:
http://www.sophos.com/virusinfo/analyses/w32nyxemd.html
polonus
« Last Edit: January 19, 2006, 02:01:01 PM by polonus »
Logged
Cybersecurity is more of an attitude than anything else. Avast Evangelists.

Use NoScript, a limited user account and a virtual machine and be safe(r)!

Offline FreewheelinFrank

  • Avast Evangelist
  • Ultra Poster
  • ***
  • Posts: 4871
  • I'm a GNU
    • Don't Surf in the Nude!
Re: Win32.MyPict-Erma (Wrm) - WHO's KNOW THIS VIRUS CURE??
« Reply #4 on: January 19, 2006, 11:09:15 PM »
Have you tried a boot time scan. Open the avast! scanner, right click the screen and select schedule a boot time scan. If you have a cordless keyboard, be sure to set the default action to 'move to chest.'

You could also try Dr Web's CureIT! as Dr Web is one of the AV's that detect this.

http://download.drweb.com/drweb+cureit/
Logged
     Bambleweeny 57 sub-meson brain     Don't Surf in the Nude Blog

astia

  • Guest
Re: Win32.MyPict-Erma (Wrm) - WHO's KNOW THIS VIRUS CURE??
« Reply #5 on: January 20, 2006, 09:50:09 AM »
i have on the boot schedule..but it still detect but still cannot remove/repair....we try to use SOPHOS....now
Logged

Offline Lisandro

  • Avast team
  • Certainly Bot
  • *
  • Posts: 67183
Re: Win32.MyPict-Erma (Wrm) - WHO's KNOW THIS VIRUS CURE??
« Reply #6 on: January 20, 2006, 11:40:00 AM »
Quote from: astia on January 20, 2006, 09:50:09 AM
i have on the boot schedule... but it still detect but still cannot remove/repair...
Which was the error message?
Can't you delete or you can delete but the file comes back?
Logged
The best things in life are free.

Spiritsongs

  • Guest
Re: Win32.MyPict-Erma (Wrm) - WHO's KNOW THIS VIRUS CURE??
« Reply #7 on: January 20, 2006, 07:31:14 PM »
 :)  Hi Astia :

     Since you have a worm ( Wrm ), I am surprised no one has
     recommended using "Ewido" available from :
     www.ewido.net/en . This good & FREE program
    "specializes" in detecting & removing trojans, worms, etc
Logged
Pages: [1]   Go Up
« previous next »