Greeting to All Alwil Forumers,
I have affected this kind worm within 7 hours ago...still searching the cure..but can't find any reference in Symantec,TrendMicro,Kaspersky..etc....anybody have any idea???
My Pict-Erma seems to be avast!S unique name for the worm.
Can you tell us the name and location of the infected file detected?
And also submit the file to Jotti’s multi-engine on line scanner, please.
This virus affected Malaysia,Asia. Its simptom like change most of the MsExcel (.xls) into JPEG file (.jpg)…but its end with (*.jpg.exe)…also found a batch file (Lafsia & Lesrma) in C:\WinNT (Win2k) & C:\WINDOW (WinXP)
[update] from Jotti Scanner
Aliases : Worm/Fifi.AU, Worm.Vb.Au, I-Worm/VB.EG, Win32.VB.FiFi.AU@mm, Win32.HLLM.Erma, W32/VB.AU-mm, Email-Worm.Win32.VB.au, I-Worm.VB
Hi astia,
This is a new threat, known as Kama Sutra worm. Worm tries to corrupt anti-virus programs. Removal instructions:
http://www.sophos.com/virusinfo/analyses/w32nyxemd.html
polonus
Have you tried a boot time scan. Open the avast! scanner, right click the screen and select schedule a boot time scan. If you have a cordless keyboard, be sure to set the default action to ‘move to chest.’
You could also try Dr Web’s CureIT! as Dr Web is one of the AV’s that detect this.
i have on the boot schedule…but it still detect but still cannot remove/repair…we try to use SOPHOS…now
Which was the error message?
Can’t you delete or you can delete but the file comes back?
Hi Astia :
Since you have a worm ( Wrm ), I am surprised no one has
recommended using "Ewido" available from :
www.ewido.net/en . This good & FREE program
"specializes" in detecting & removing trojans, worms, etc