removing a worm

risky rick · 10-14-2007, 06:18 AM

I have the worm brontokA on my pc (windows xp sp2)
and I want to have it removed.

I have found a site telling you how to remove it manually
from the registry but it also states that there is a risk.

I can't afford to crash that particular pc because of the
info on it. Could somebody with experience tell me if they
are safe instructions to carry out if followed religously.
http://www.adwarealert.com/glossary_details.php?ID=1637

or if there is anything else you could advise I do

10-14-2007, 08:22 AM

Hi and welcome to TSF

It seems that you are infected and that you have to save the data on that computer. As the security section is better suited for this I would like you to follow the instructions in this as best as you can: (Updated!) IMPORTANT - Read This Before Posting A Log. Then I would like you to post a log here: Hijackthis Log Help

Hope this helps, Regards,

TechPro5238

risky rick · 10-15-2007, 01:57 PM

Thanks for the welcome techpro and the response!

The computer that has the worm is used for music production
and isn't connected to the internet so it's always stable,
except it caught this worm through a usb pen when transfering
files from my infected laptop (and I have already rebooted my
laptop to get rid of it).

Is it at all possible for you to help me get rid of this worm
without the pc being connected to the internet, as I can not
do an online scan although I am pretty sure it's the brontokA
worm as the symptoms are identical, also it actually says 'BRONTOK[A]'
at the beginning of its pop ups..

otherwise I will have to get this pc to an internet connection

10-15-2007, 03:40 PM

Okay, I am sorry to say but, I am not allowed to help in security issues. Please tell them that you caught it from the drive as you will have to clean the drive to. Just follow the link above and have them fix it as I can do nothing, I am only a trainee right now.

10-14-2007, 06:18 AM	#1 (permalink)
risky rick Registered User Join Date: Jul 2006 Posts: 5 OS: XP sp2	removing a worm I have the worm brontokA on my pc (windows xp sp2) and I want to have it removed. I have found a site telling you how to remove it manually from the registry but it also states that there is a risk. I can't afford to crash that particular pc because of the info on it. Could somebody with experience tell me if they are safe instructions to carry out if followed religously. http://www.adwarealert.com/glossary_details.php?ID=1637 or if there is anything else you could advise I do

10-14-2007, 08:22 AM	#2 (permalink)
techpro5238 Guest Posts: n/a OS:	Re: removing a worm Hi and welcome to TSF It seems that you are infected and that you have to save the data on that computer. As the security section is better suited for this I would like you to follow the instructions in this as best as you can: (Updated!) IMPORTANT - Read This Before Posting A Log. Then I would like you to post a log here: Hijackthis Log Help Hope this helps, Regards, TechPro5238

10-15-2007, 01:57 PM	#3 (permalink)
risky rick Registered User Join Date: Jul 2006 Posts: 5 OS: XP sp2	Re: removing a worm Thanks for the welcome techpro and the response! The computer that has the worm is used for music production and isn't connected to the internet so it's always stable, except it caught this worm through a usb pen when transfering files from my infected laptop (and I have already rebooted my laptop to get rid of it). Is it at all possible for you to help me get rid of this worm without the pc being connected to the internet, as I can not do an online scan although I am pretty sure it's the brontokA worm as the symptoms are identical, also it actually says 'BRONTOK[A]' at the beginning of its pop ups.. otherwise I will have to get this pc to an internet connection

10-15-2007, 03:40 PM	#4 (permalink)
techpro5238 Guest Posts: n/a OS:	Re: removing a worm Okay, I am sorry to say but, I am not allowed to help in security issues. Please tell them that you caught it from the drive as you will have to clean the drive to. Just follow the link above and have them fix it as I can do nothing, I am only a trainee right now.