help removing this worm in my computer plz?

Question

yesterday someone sent me a worm... Engu.exe what it does is it sends emails to other ppl.... but i have mcaffe antivirus and it blocked the worm.. but when i go find the worm to the right location c:\windows\system32\28463\Engu.exe i cannot find it!! i cant find the folder 28463....and when i go alt ctrl dlt -processes i see the worm running.. so i End the process and the warm stops sending the emails... but i really want to remove this worm... i tried some antivirus to remove this program like spybot , spyhunter,spyware doctor AVG 7.5 .. but none of them cant find the worm... what should i do?!?!

Answer 1

Ok the method is very easy,

u cannot find that worm file becoz its a system file and u cannot view that from windows, just GOto tools>folder options in my computer or any explorer window, goto view and scroll down in advanced settings and un-tick the button marked with 'Hide System Protected file and folders'

Then Apply.....



Now goto to that folder and check its showing now, if yes open task manager, kill that process if currently active, then try deleting that file....



Also for better security scan ur complete hard drive for such worms by serching that filename from search utility, just check that u have ticked Search hidden files and folders under 'more advanced options' tab...



Do all this while ur system files all unhidden..........

Answer 2

(Windows XP and 2000 ONLY. If you are running a different version of Windows, skip this step and start at the next paragraph) Download SmitFraudFix and restart your computer in safe mode. Once in safe mode, disable System Restore, and run the program, running options 2,3, and 5. Then restart your computer in normal mode. Now make sure that you have an up to date antivirus program (If you don't, install Avira AntiVir Personal. It has considerably higher detection rates than AVG, and marginally higher detection rates than Avast!. If you have one that has expired, uninstall it with RevoUninstaller and then install Avira AntiVir Personal). I would also recommend that you use ThreatFire, Spyware Doctor Starter Edition, and Comodo Firewall (Just like with the antivirus above, you should only have ONE firewall). Once they are installed, disable System Restore and do full scans with all of them. If you need any extra help, feel free to send me a message on Yahoo Messenger and I can walk you through it or help you some more.

Answer 3

How about you do a search online for the worm you have in your pc, there is plenty of help online on how to remove worm. Try system RESTORE to an earlier time before you got the worn in your system. Also try Windows Defender at the following website:



http://www.microsoft.com/athome/security/spyware/software/default.mspx

Answer 4

try to boot the systhem up in safe mode if worm still runnin u have to sreach internet for removal tools. worst comes to worst back up all ur good stuff , format ur drive.

Answer 5

Hummmmm..I never had a worm in my computer before.



Did you try setting out a dish of water next to it the night before. Maybe it'll come out in need of moisture.

Answer 6

run your av in safe mode + download this just incase an run insafe mode:

http://vil.nai.com/vil/stinger/

Answer 7

I'd ask McAfee...if they blocked it , they should be able to tell you how to remove it !!

Answer 8

you can try this free app from dr.web

perhap it will help you.