Worm.Win32.Netbooster or Netbooster Removal Guide
2 views
Skip to first unread message
printed151
Aug 4, 2008, 3:31:37 PM8/4/08
to VietPhim
Do you know what Worm.Win32.Netbooster is?
DESCRIPTION
Worm.Win32.Netbooster, sometimes referred to as Worm.Win32 or
Netbooster, is a rogue anti-spyware program that use to be a
classified as a virus. Worm.Win32.Netbooster is similar to IE Defender
which is another fake anti-spyware program that uses devious tricks to
get users to pay for a full version of the rogue software. Through our
experience, Worm.Win32.Netbooster is usually installed in a stealthily
manor through either a Trojan, virus, or a fake video codec download.
Worm.Win32.Netbooster was discovered to display fake system alerts and
popups to try to get users to buy the full licensed version of the
Worm.Win32.Netbooster program.
In non-techie terms: Worm.Win32.Netbooster is similar to other rogue
anti-spyware programs such as IE Defender which both use illicit
tactics to extort money from computer users. Worm.Win32.Netbooster may
be promoted on malicious websites and it is recommended that all
computer users avoid those sites no matter how legit they may look. Do
not under any circumstances purchase Worm.Win32.Netbooster.
Aliases: Worm.Win32.Netbooster, Trojan.Win32, Worm.Win32
Trojan.Win32.Obfuscated.gx, Netbooster
Worm.Win32.Netbooster Automatic Removal Instructions
This automatic removal method is for non-techie computer users. If
you’re too lazy to learn about spyware removal or how to access
sensitive files in your computer, then this is the method for you.
Before you start: Print or bookmark these instructions because you’ll
have to reboot into Safe Mode. Also back up your computer in case you
make a mistake.
1. Download and save SmitFraudFix to your desktop.
Download Here : http://www.megaupload.com/?d=PBKE3NLR
2. Restart your computer in Safe Mode (how to do safe mode). Once the
desktop appears, double click on the SmitfraudFix.exe on your
desktop.
3. After the credits screen, you’ll see a menu. Select the option
number 2, which is ‘Clean (safe mode recommended)’, and then
press Enter to delete infect files.
4. SmitFraudFix will begin cleaning your computer and take a series of
cleanup processes. When the process is over, it will automatically
begin the Disk Cleanup program.
5. Once the Disk Cleanup program is complete, you will be prompted
with the message ‘Registry cleaning - Do you want to clean the
registry’. Answer Y (Yes) and hit Enter. Reboot your computer.
6. SmitFraudFix will now check if wininet.dll is infected.
SmitFraudFix will ask you whether to replace the infected file (if
there’s any) ‘Replace infected
file?’ Answer by typing Y (Yes) and hit Enter.
7. Reboot your computer to complete the cleaning process.
8. After reboot, a Notepad screen may appear containing a log of all
the files
removed from your computer. If it doesn’t appear, a file will be
created called
rapport.txt in the root of your drive, (Local Disk C:).
9. Restart your computer in Safe Mode (how to do safe mode).
10. Go to C:\Windows\Temp, click Edit, click Select All, press DELETE,
and then
click Yes to confirm that you want all the items to go to the Recycle
Bin.
11. Go to C:\Documents and Settings\[LISTED USER]\Local Settings\Temp,
click Edit, click Select All, press DELETE, and then click Yes to
confirm that
you want all the items to go to the Recycle Bin.
12. Reboot your computer back to normal mode. Go to Windows Update and
download all critical updates.
Worm.Win32.Netbooster Manual Removal Instructions
This manual removal method is for techie computer users.
Worm.Win32.Netbooster manual removal may be difficult and time
consuming to remove. There’s no guarantee that Worm.Win32.Netbooster
will be removed completely. So read the Worm.Win32.Netbooster removal
steps carefully and good luck.
Before you start: Close all programs and Internet browsers. Also back
up your computer in case you make a mistake and your computer stops
working.
1. Uninstall Worm.Win32.Netbooster Program
Click on Start > Settings > Control Panel > Double-click on Add/Remove
Programs. Search for and uninstall Worm.Win32.Netbooster if found.
2. To stop Worm.Win32.Netbooster processes (view process removal
steps)
Go to Start > Run > type taskmgr. The click the Processes tab and
you’ll see a list of running processes.
Search and stop these Worm.Win32.Netbooster processes:
kl1.exe
CPpassword.exe
cic.exe
b124.exe
nwnmff_7[1].exe
ms1.exe
mljul1.exe
b122.exe
Gwang.exelaf1.exe
pschdprf.exe
toolbar.exe
kybrdff_7[1].exe
mc-0-0-0.exe
dmband.exe
kqdsrngj.exe
qiawpbjj.exe
plite731.exe
mscorsvc.exe
1189461984[1].exe
spoolc.exe
For each unwanted process, right-click on it and then select “End
task”.
3. To Unregister Worm.Win32.Netbooster DLLs (view DLL removal steps)
Search and unregister these Worm.Win32.Netbooster DLLs:
mscfg32.dll
cjvy.dll
vtssp.dll
ttvbonvgl.dll
ssqppol.dll
gqagksr.dll
esent9.dll
pmspl.dll
windivx.dll
msvideo.dll
ecxwp.dll
stream32a.dll
websrc32.dll
mlljh.dll
urqnomm.dll
To locate the Worm.Win32.Netbooster DLL path, go to Start > Search >
All Files or Folders. Type Worm.Win32.Netbooster and in the Look in:
select either My Computer or Local Hard Drives. Click the Search
button. Once you have the Worm.Win32.Netbooster DLL path, go to Start
and then click on Run. In the Run command box, type cmd, and then
click on OK.
To locate the exact DLL path, type cd in order to change the current
directory. To display the contents of the directory, use the dir
command. To remove the DLL file type regsvr32 /u FILENAME.dll
(FILENAME is the name of the file that you want to unregister).
4. To unregister Worm.Win32.Netbooster registry keys (view registry
keys removal steps)
Go to Start > Run > type regedit > press OK. Edit the value (on the
right pane) by right-clicking on it and selecting the Modify option.
Select the Delete option.
Search and delete these Worm.Win32.Netbooster registry keys:
69B98C68-D2B8-4A4E-9CB7-E85B6F3A7014
c4545fc9-26d0-4ccf-b4fb-728aed895dbd
BBB05D9E-0297-404D-A6BF-D8F2876B84A6
F9EAAA11-DF98-4615-A2C7-7D03C86A6BE9
202EBB90-ABD4-46CC-BB5A-4F0ECC67B331
E856E05E-1B91-4339-9EFC-9A3308CB5491
B3E45A9B-7756-46A2-AB14-90175CD374F9
b166be07-30a4-4d38-b781-44528a630706
D17CFF74-A19C-4C36-821A-E074E4F889CA
15EB9F40-D775-4463-B75B-8687B3C66BB7
A8565FBC-8D53-4D4F-9BB0-CBC68A22B126
43BA0532-0D69-458A-8C71-AD0F6AE70D19
6A719349-BDF5-4268-9019-4ACA0C2562D2
6D64B03B-3B93-4AF2-BFC6-01264A4C7F2A
62EA9201-8CC7-4199-AC30-7744F836322E
5. If your homepage has been changed, go to Start > Control Panel >
Internet Options > click on the General > click Use Default under Home
Page. Add the your desired default homepage, then click Apply > click
OK. Open a new web browser to check that you have your desired default
homepage.
6. Remove Worm.Win32.Netbooster Directories.
To find Worm.Win32.Netbooster directories, go to Start > My Computer >
Local Disk (C:) > Program Files > Show the contents of this folder.
Search and delete the following Worm.Win32.Netbooster directories:
C:\ProgramFiles\Worm.Win32.Netbooster
Right-click on the Worm.Win32.Netbooster folder and select Delete. A
message will appear saying ‘Are you sure you want to remove the folder
[NAME OF FOLDER] and move all its contents to the Recycle Bin?’, click
Yes. Another message will appear saying ‘Renaming, moving or deleting
[FOLDERNAME] could make some programs not work. Are you sure you want
to do this?’, click Yes.
7. To remove Worm.Win32.Netbooster icons on your Desktop, drag and
drop them to the Recycle Bin.
You’ve completed the Worm.Win32.Netbooster manual removal
instructions!
I hope this article has helped you solve your Worm.Win32.Netbooster
problems. If you want to contribute to this article, post your comment
below.
Disclaimer: This article is for educational purposes. By using this
information you agree to be bound by the disclaimer. There’s no
guarantee that Worm.Win32.Netbooster will be completely removed from
your computer. Seek professional help if your computer continues to
experience problems.
SmitFraudFix Download Here : http://www.megaupload.com/?d=PBKE3NLR
DESCRIPTION
Worm.Win32.Netbooster, sometimes referred to as Worm.Win32 or
Netbooster, is a rogue anti-spyware program that use to be a
classified as a virus. Worm.Win32.Netbooster is similar to IE Defender
which is another fake anti-spyware program that uses devious tricks to
get users to pay for a full version of the rogue software. Through our
experience, Worm.Win32.Netbooster is usually installed in a stealthily
manor through either a Trojan, virus, or a fake video codec download.
Worm.Win32.Netbooster was discovered to display fake system alerts and
popups to try to get users to buy the full licensed version of the
Worm.Win32.Netbooster program.
In non-techie terms: Worm.Win32.Netbooster is similar to other rogue
anti-spyware programs such as IE Defender which both use illicit
tactics to extort money from computer users. Worm.Win32.Netbooster may
be promoted on malicious websites and it is recommended that all
computer users avoid those sites no matter how legit they may look. Do
not under any circumstances purchase Worm.Win32.Netbooster.
Aliases: Worm.Win32.Netbooster, Trojan.Win32, Worm.Win32
Trojan.Win32.Obfuscated.gx, Netbooster
Worm.Win32.Netbooster Automatic Removal Instructions
This automatic removal method is for non-techie computer users. If
you’re too lazy to learn about spyware removal or how to access
sensitive files in your computer, then this is the method for you.
Before you start: Print or bookmark these instructions because you’ll
have to reboot into Safe Mode. Also back up your computer in case you
make a mistake.
1. Download and save SmitFraudFix to your desktop.
Download Here : http://www.megaupload.com/?d=PBKE3NLR
2. Restart your computer in Safe Mode (how to do safe mode). Once the
desktop appears, double click on the SmitfraudFix.exe on your
desktop.
3. After the credits screen, you’ll see a menu. Select the option
number 2, which is ‘Clean (safe mode recommended)’, and then
press Enter to delete infect files.
4. SmitFraudFix will begin cleaning your computer and take a series of
cleanup processes. When the process is over, it will automatically
begin the Disk Cleanup program.
5. Once the Disk Cleanup program is complete, you will be prompted
with the message ‘Registry cleaning - Do you want to clean the
registry’. Answer Y (Yes) and hit Enter. Reboot your computer.
6. SmitFraudFix will now check if wininet.dll is infected.
SmitFraudFix will ask you whether to replace the infected file (if
there’s any) ‘Replace infected
file?’ Answer by typing Y (Yes) and hit Enter.
7. Reboot your computer to complete the cleaning process.
8. After reboot, a Notepad screen may appear containing a log of all
the files
removed from your computer. If it doesn’t appear, a file will be
created called
rapport.txt in the root of your drive, (Local Disk C:).
9. Restart your computer in Safe Mode (how to do safe mode).
10. Go to C:\Windows\Temp, click Edit, click Select All, press DELETE,
and then
click Yes to confirm that you want all the items to go to the Recycle
Bin.
11. Go to C:\Documents and Settings\[LISTED USER]\Local Settings\Temp,
click Edit, click Select All, press DELETE, and then click Yes to
confirm that
you want all the items to go to the Recycle Bin.
12. Reboot your computer back to normal mode. Go to Windows Update and
download all critical updates.
Worm.Win32.Netbooster Manual Removal Instructions
This manual removal method is for techie computer users.
Worm.Win32.Netbooster manual removal may be difficult and time
consuming to remove. There’s no guarantee that Worm.Win32.Netbooster
will be removed completely. So read the Worm.Win32.Netbooster removal
steps carefully and good luck.
Before you start: Close all programs and Internet browsers. Also back
up your computer in case you make a mistake and your computer stops
working.
1. Uninstall Worm.Win32.Netbooster Program
Click on Start > Settings > Control Panel > Double-click on Add/Remove
Programs. Search for and uninstall Worm.Win32.Netbooster if found.
2. To stop Worm.Win32.Netbooster processes (view process removal
steps)
Go to Start > Run > type taskmgr. The click the Processes tab and
you’ll see a list of running processes.
Search and stop these Worm.Win32.Netbooster processes:
kl1.exe
CPpassword.exe
cic.exe
b124.exe
nwnmff_7[1].exe
ms1.exe
mljul1.exe
b122.exe
Gwang.exelaf1.exe
pschdprf.exe
toolbar.exe
kybrdff_7[1].exe
mc-0-0-0.exe
dmband.exe
kqdsrngj.exe
qiawpbjj.exe
plite731.exe
mscorsvc.exe
1189461984[1].exe
spoolc.exe
For each unwanted process, right-click on it and then select “End
task”.
3. To Unregister Worm.Win32.Netbooster DLLs (view DLL removal steps)
Search and unregister these Worm.Win32.Netbooster DLLs:
mscfg32.dll
cjvy.dll
vtssp.dll
ttvbonvgl.dll
ssqppol.dll
gqagksr.dll
esent9.dll
pmspl.dll
windivx.dll
msvideo.dll
ecxwp.dll
stream32a.dll
websrc32.dll
mlljh.dll
urqnomm.dll
To locate the Worm.Win32.Netbooster DLL path, go to Start > Search >
All Files or Folders. Type Worm.Win32.Netbooster and in the Look in:
select either My Computer or Local Hard Drives. Click the Search
button. Once you have the Worm.Win32.Netbooster DLL path, go to Start
and then click on Run. In the Run command box, type cmd, and then
click on OK.
To locate the exact DLL path, type cd in order to change the current
directory. To display the contents of the directory, use the dir
command. To remove the DLL file type regsvr32 /u FILENAME.dll
(FILENAME is the name of the file that you want to unregister).
4. To unregister Worm.Win32.Netbooster registry keys (view registry
keys removal steps)
Go to Start > Run > type regedit > press OK. Edit the value (on the
right pane) by right-clicking on it and selecting the Modify option.
Select the Delete option.
Search and delete these Worm.Win32.Netbooster registry keys:
69B98C68-D2B8-4A4E-9CB7-E85B6F3A7014
c4545fc9-26d0-4ccf-b4fb-728aed895dbd
BBB05D9E-0297-404D-A6BF-D8F2876B84A6
F9EAAA11-DF98-4615-A2C7-7D03C86A6BE9
202EBB90-ABD4-46CC-BB5A-4F0ECC67B331
E856E05E-1B91-4339-9EFC-9A3308CB5491
B3E45A9B-7756-46A2-AB14-90175CD374F9
b166be07-30a4-4d38-b781-44528a630706
D17CFF74-A19C-4C36-821A-E074E4F889CA
15EB9F40-D775-4463-B75B-8687B3C66BB7
A8565FBC-8D53-4D4F-9BB0-CBC68A22B126
43BA0532-0D69-458A-8C71-AD0F6AE70D19
6A719349-BDF5-4268-9019-4ACA0C2562D2
6D64B03B-3B93-4AF2-BFC6-01264A4C7F2A
62EA9201-8CC7-4199-AC30-7744F836322E
5. If your homepage has been changed, go to Start > Control Panel >
Internet Options > click on the General > click Use Default under Home
Page. Add the your desired default homepage, then click Apply > click
OK. Open a new web browser to check that you have your desired default
homepage.
6. Remove Worm.Win32.Netbooster Directories.
To find Worm.Win32.Netbooster directories, go to Start > My Computer >
Local Disk (C:) > Program Files > Show the contents of this folder.
Search and delete the following Worm.Win32.Netbooster directories:
C:\ProgramFiles\Worm.Win32.Netbooster
Right-click on the Worm.Win32.Netbooster folder and select Delete. A
message will appear saying ‘Are you sure you want to remove the folder
[NAME OF FOLDER] and move all its contents to the Recycle Bin?’, click
Yes. Another message will appear saying ‘Renaming, moving or deleting
[FOLDERNAME] could make some programs not work. Are you sure you want
to do this?’, click Yes.
7. To remove Worm.Win32.Netbooster icons on your Desktop, drag and
drop them to the Recycle Bin.
You’ve completed the Worm.Win32.Netbooster manual removal
instructions!
I hope this article has helped you solve your Worm.Win32.Netbooster
problems. If you want to contribute to this article, post your comment
below.
Disclaimer: This article is for educational purposes. By using this
information you agree to be bound by the disclaimer. There’s no
guarantee that Worm.Win32.Netbooster will be completely removed from
your computer. Seek professional help if your computer continues to
experience problems.
SmitFraudFix Download Here : http://www.megaupload.com/?d=PBKE3NLR
Reply all
Reply to author
Forward
0 new messages