[Resolved] I have that win 32 worm

Hi,

All of those songs you downloaded with Limewire are infected and should be deleted.

C:\Documents and Settings\Camille Powell\My Documents\My Music\Limwire\girl amazin usher.wm
C:\Documents and Settings\Camille Powell\My Documents\My Music\Limwire\girl you amazin usher.wm
C:\Documents and Settings\Camille Powell\My Documents\My Music\Limwire\installer_en.exe
C:\Documents and Settings\Camille Powell\My Documents\My Music\Limwire\marques houston always forever.wm
C:\Documents and Settings\Camille Powell\My Documents\My Music\Limwire\marques houston wonderful.wm
C:\Documents and Settings\Camille Powell\My Documents\My Music\Limwire\t l cross this time.wm
C:\Documents and Settings\Camille Powell\My Documents\My Music\Limwire\usher love always.wm
C:\Documents and Settings\Camille Powell\My Documents\My Music\Limwire\usher oo shorty.wm

You should also delete the following files:

C:\WINDOWS\Downloaded Program Files\CleanerInstall.exe
C:\WINDOWS\Downloaded Program Files\CONFLICT.1\CleanerInstall.exe
C:\WINDOWS\Downloaded Program Files\CONFLICT.2\CleanerInstall.exe
C:\WINDOWS\Downloaded Program Files\popcaploader.dll
C:\WINDOWS\Downloaded Program Files\UGA6P_0001_N122M2210NetInstaller.exe

You should also have HJT fix this entry, I missed it earlier:

O16 - DPF: {DF780F87-FF2B-4DF8-92D0-73DB16A1543A} (PopCapLoader Object) - http://www.popcap.com/games/popcaploader_v6.cab

If all is well you are probably all set. Let me know if it's still running OK.

Hi,
I'm assuming everything is pretty much ok here. You can remove the smitfraudfix tool if you haven't done so already.

Now that you are clean here are some suggestions.

How do I protect myself from infection?
Can you tell me how I got infected?

Since this issue appears to be resolved … this Topic has been closed. Glad we could be of assistance. If you're the topic starter, and need this topic reopened, please contact a staff member with the address of the thread. Everyone else please begin a New Topic.