Worm.Win32.Netbooster

Posted by Emma Adrian in Blog Latest Spyware Threats, Recent Articles, Top Spyware Threats, Worm on February 2nd, 2009 | 1 Comment
TAGS: , ,

What is Worm.Win32.Netbooster?
Worm.Win32.Netbooster is a worm that appears in fake security alerts from rogue antispyware which usually gets installed onto your PC without your permission, through Trojan, malware and virus (or you could get it by installing a fake video codec). Worm.Win32.Netbooster popups could read “Your browser was hijacked by Worm.Win32.Netbooster” and is supposed to scare you into buying the fake antispyware, like Smitfraud. You’re not really infected with Worm.Win32.Netbooster — you’re infected with fake anti-spyware that you need to remove.

Worm.Win32.Netbooster Variants: Trojan.Win32, Worm.Win32 and Trojan.Win32.Obfuscated.gx

Do you have Worm.Win32.Netbooster?
If you have enough time and expertise, you can search your computer for Worm.Win32.Netbooster manually. However, it might take hours to find out all files of Worm.Win32.Netbooster, and it is possible that Worm.Win32.Netbooster will appear after rebooting, for its hidden files may still be there.

Download automatic scanner for Worm.Win32.Netbooster
Spyware Cease – the technology-oriented security protection that provides a risk-free computing environment for your home and office – with detection, removal and guard in one intuitive and straight-forward interface. Only Spyware Cease gives you individual fix against the most dangerous spyware problems.

Manual Worm.Win32.Netbooster removal instructions
WARNING: The manually removal method is for advanced users. Worm.Win32.Netbooster manually removal can be difficult and time-consuming. There is no guarantee that Worm.Win32.Netbooster can be completely removed, for there are hundreds of files generated when Worm.Win32.Netbooster installed on your system. Make sure to back up your computer in case that you make any mistakes and your system does not work.

Follow the instruction below for Worm.Win32.Netbooster removal manually:

Navigate and stop Worm.Win32.Netbooster processes:
N/A

Navigate and Unregister Worm.Win32.Netbooster DLL Files:
stream32a.dll
msvideo.dll
windivx.dll
websrc32.dll
mscfg32.dll
pdswin.dll
ecxwp.dll
pmspl.dll
vipextqtr.dl

Navigate and Remove Worm.Win32.Netbooster registry values:
c4545fc9-26d0-4ccf-b4fb-728aed895dbd
BBB05D9E-0297-404D-A6BF-D8F2876B84A6
F9EAAA11-DF98-4615-A2C7-7D03C86A6BE9
202EBB90-ABD4-46CC-BB5A-4F0ECC67B331
62EA9201-8CC7-4199-AC30-7744F836322E
b166be07-30a4-4d38-b781-44528a630706
D17CFF74-A19C-4C36-821A-E074E4F889CA
15EB9F40-D775-4463-B75B-8687B3C66BB7
E856E05E-1B91-4339-9EFC-9A3308CB5491
B3E45A9B-7756-46A2-AB14-90175CD374F9
69B98C68-D2B8-4A4E-9CB7-E85B6F3A7014
A8565FBC-8D53-4D4F-9BB0-CBC68A22B126
43BA0532-0D69-458A-8C71-AD0F6AE70D19
6D64B03B-3B93-4AF2-BFC6-01264A4C7F2A
6A719349-BDF5-4268-9019-4ACA0C2562D2

Navigate and Delete Worm.Win32.Netbooster files:
mscfg32.dll
cjvy.dll
vtssp.dll
ttvbonvgl.dll
ssqppol.dll
gqagksr.dll
esent9.dll
pmspl.dll
windivx.dll
msvideo.dll
ecxwp.dll
stream32a.dll
websrc32.dll
mlljh.dll
urqnomm.dll

What are the symptoms of Worm.Win32.Netbooster?

  • Worm.Win32.Netbooster may spread via Trojans
  • Worm.Win32.Netbooster may pop up fake security messages
  • Worm.Win32.Netbooster may install spyware to your computer
  • Worm.Win32.Netbooster may repair its files, spread or update by itself
  • Worm.Win32.Netbooster may violate your privacy and compromises your security

How do I keep away from Worm.Win32.Netbooster?
Once you have cleaned up Worm.Win32.Netbooster, the most important point to prevent Worm.Win32.Netbooster and future malicious programs from reverting is to stay suspicious of spam E-mail attachment and unknown websites. Here are several ways in which you can help protect your computer against Worm.Win32.Netbooster and other malware:

  • Use a computer firewall
  • Confirm that you have downloaded all the latest critical security updates
  • Adjust Internet Explorer web browser’s security settings
  • Download and install anti-spyware protection, such as, Spyware Cease
  • Surf sites and download programs from the web sites you trust

What is Worm?
Worm.Win32.Netbooster is a type of Worm.

In a computer, a worm is a self-replicating computer program that does not alter files but resides in active memory. The difference between a computer worm and a computer virus is that a computer virus can not run itself. A virus usually needs a virus program to run, and the virus code also runs as part of the host program. However, a worm does not need a host program to run; it uses a network to spread itself over computers on the network.

The original computer worm was released (maybe accidentally) on the Internet by Robert Tappan Morris in 1988. The Internet Worm used sendmail, fingerd, and rsh/rexec to spread itself across the Internet.

The SQL Slammer Worm of 2003 used vulnerability in Microsoft SQL Server 2000 to spread itself across the Internet. The Blaster Worm, also of 2003, used vulnerability in Microsoft DCOM RPC to spread itself.

The Melissa worm of 1999, the Sobig worms of 2003 and the Mydoom worm of 2004, all spread through e-mail. These worms shared some features of a Trojan horse, in that they spread by enticing a user to open an infected e-mail attachment.

Mydoom also attempted to spread itself through the peer-to-peer file sharing application KaZaA. The Mydoom worms attempted a Denial of Service (DoS) attack against SCO and Microsoft.