Author Topic: how do i completely remove netsky C  (Read 6183 times)

0 Members and 1 Guest are viewing this topic.

maddie

  • Guest
how do i completely remove netsky C
« on: June 04, 2004, 10:24:56 AM »
Hi all!
I have an enduring problem with the worm netsky C.. some weeks ago i had about 4000 infected files which i deleted with a virus-scanner (antivir.de). i heard nothing for a few days and then 1 infected file which i deleted and now a few days later another infected file which i dont want to delete, because it is important!
How can i remove this worm from my computer and never get it back???? does it sit somewhere and infects files from time to time??? this antivir-program is considered as one of the best freeware programs, i think.
Can anyone help me please??
maddie

Offline igor

  • Avast team
  • Serious Graphoman
  • *
  • Posts: 11848
    • AVAST Software
Re:how do i completely remove netsky C
« Reply #1 on: June 04, 2004, 10:28:45 AM »
NetSky is a worm - it doesn't infect files. So, what is this important file you don't want to delete? What is its exact file name?

maddie

  • Guest
Re:how do i completely remove netsky C
« Reply #2 on: June 04, 2004, 10:38:49 AM »
oh, okay...
the file is bibliothek.mdb and antivir says it were infected... i chose not to delete it but i didnt open it again.

Offline igor

  • Avast team
  • Serious Graphoman
  • *
  • Posts: 11848
    • AVAST Software
Re:how do i completely remove netsky C
« Reply #3 on: June 04, 2004, 10:45:17 AM »
Oh, it sounds like a false alarm then... I really doubt a .mdb file could get infected.
What is this file? (what program does it belong to?)

maddie

  • Guest
Re:how do i completely remove netsky C
« Reply #4 on: June 04, 2004, 02:22:06 PM »
it is a microsoft access file....

Offline igor

  • Avast team
  • Serious Graphoman
  • *
  • Posts: 11848
    • AVAST Software
Re:how do i completely remove netsky C
« Reply #5 on: June 04, 2004, 02:24:46 PM »
Well, I know that :)
I mean, did you create it in Access directly, or is it a database of some application, or... ?
I'm just wondering how the worm code could get inside of the file.

What operating system do you use, by the way?

maddie

  • Guest
Re:how do i completely remove netsky C
« Reply #6 on: June 04, 2004, 02:29:01 PM »
sorry!
yes, i directly created the file in access and i am using windows 98...

Offline igor

  • Avast team
  • Serious Graphoman
  • *
  • Posts: 11848
    • AVAST Software
Re:how do i completely remove netsky C
« Reply #7 on: June 04, 2004, 02:51:40 PM »
Well, if it's Windows 98, then I think here is the explanation: Microsoft Office programs (Word, Excell, Access) are known not to initialize the memory they allocate. The Windows 9x operating system doesn't perform the initialization either. So, sometimes, the following happens: the physical memory where the virus/worm was loaded is swapped out (or deallocated) and this memory block is allocated in the Access process. The memory is not cleared - so the original virus code is still there. Access writes the important fields to the memory (fills the structure) - but some unimportant parts ("gaps") remain uninitialized (i.e. they still contain pieces of the virus code). Then, the file is saved and this memory block is written to the .mdb file. Pieces of the virus code are still inside... and avast! finds them.

You don't have to be worried about it - the virus is certainly not active (or complete) there and cannot be activated. Of course, it may be annoying that avast! detects the file as infected.
I would suggest to "compact" the database (there should be such command in Access) - I hope it will clear the unused parts of the MDB file.

maddie

  • Guest
Re:how do i completely remove netsky C
« Reply #8 on: June 04, 2004, 03:42:34 PM »
 ;D
thank you very much!! that sounds very good and i am really happy not to delete this file! thanks and i try the compact-the-database-thing!

maddie

  • Guest
Re:how do i completely remove netsky C
« Reply #9 on: June 04, 2004, 05:30:45 PM »
hi again...
so - it sounded good. but my father accidentially deleted the file when starting the antivirus-program. ...!!
is there any chance to get it back ? do these programs have any quarantine place or something like that for "infected" files??
i am really p...
thanks again,
maddie

Offline igor

  • Avast team
  • Serious Graphoman
  • *
  • Posts: 11848
    • AVAST Software
Re:how do i completely remove netsky C
« Reply #10 on: June 07, 2004, 09:42:36 AM »
Well, there is a Virus Chest in avast! (where you can recover the file from) - but that requires the user to instruct avast! to "Move the infected file to Chest". If the selected action was "Delete file", the file was simply deleted... (you may try some file-recovery tools in that case, but that's not 100% solution, of course :()