net worm-.1 fp

Viruses and worms
1

net worm-.1 fp

Has anyone experienced this nasty worm, I have searched and can’t find any info anywhere??
It changes your homepage, it tries to get you to download malicious software programs and it give you critical security warnings popping up in your system tray which names net worm-.1 fp.
Thanks

2

What Operating System are you using ? is it up to date ?
What is your firewall ?

Well google turns up lots of hit for net worm-.1 but nothing of much use, however a search for “net worm-.1” with the quotes only returns 2 hits, net-worm1 returns many hits, again nothing of great help.

It is very difficult to identify a worm/virus by its effect, changing your homepage (browser hijack) are usually associated with adware and the downloading of malicious programs is normally associated with trojan downloaders not worms.

So you should adequately protect yourself against these types of attack and have a firewall that offers protection against unauthorised outbound internet connections.

If you haven’t already got this software (freeware), download, install, update and run it, preferably in safe mode.
1.a-Squared free.
2. Ad-Aware
3. Spybot Search and Destroy
4. Spywareblaster Don’t install this until you are clean.

The key question is are you suffering any of these symptoms and if so please try to be more detailed, screen shots of critical security warnings (often associated with rouge anti-spyware programs) ?

3

thanks for you reply. The operating system is windows xp and it is up to date the computer has norton 2006 and it also has all updates. The system when not on the internet gets pop ups at the on the top of the pop up the file name is iddp4.dll when a search is done on the computer you find it in the windows temp folder after you delete it the next time when you start up the computer the pop up will read iddp5.dll in the temp file there will also be a file called idd5.dll.exe which then cannot be deleted. So if you restart the computer in safe mode go to the temp folder you are able to delete it. I have run protector plus, Avg, Micro trends house call and the norton and it does not find it. On the pop up that appears in the system tray it will give you a warning that the computer is infected and you should download a scanning software. From what I have been able to find the software is a scam and you should not download it this is from other forums. Not sure what to try just wanted to know if anyone else has had the same problem and has a quick fix I do not want to have to format.

4

Hi lovetofish,

Hope you catch 'em, worms are good to fish with, but on a computer they are not so well appreciated. Well a nice cleaning routine can be found here, with the tools and programs for cleansing there, remember every cleansing routine is different and needs support of a handler that knows what he or she is doing, but to get the idea behind it, go here:
http://forums.techguy.org/security/505632-solved-networm-i-virus-fp.html

So you see it is a nasty spyware/adware infection of the SmitFraud type, in combination with other spyware or malware.

polonus

5

Thanks for the help seem to work great. You would think that people who create things like that would have better things to do with there time.

Thanks again.

6

Do you actually have avast installed on this system ?

The reason I ask is it isn’t advised to have two resident anti-virus programs on the same system as they can cause conflict and Norton seems a very common condition when these conflicts arise, it is also very hard to remove Norton as many posts in these forums confirm.

A google search for iddp4.dll and iddp4.dll.exe return zero hits, which in itself is suspicious.

As I mentioned, these “critical security warnings (often associated with rouge anti-spyware programs)” and your comment confirms this.

On the pop up that appears in the system tray it will give you a warning that the computer is infected and you should download a scanning software. From what I have been able to find the software is a scam and you should not download it this is from other forums.

So this seem to be the main issue here and you should investigate the link polonus gave and also check out this link, read it carefully and print the page of instructions so you can follow whilst off-line. This one has a combined removal tool with instructions relating to the Smitfraud type of rogue anti-spyware, courtesy of my Netherlander friend
http://siri.urz.free.fr/Fix/SmitfraudFix_En.php