Blackworm Virus!!!

Question

I need help! Two weeks ago I started to get a new window that would pop up when searching the web. It would say my computer has been infected with the 'blackworm' virus, and needed to download winfix, or winspyware.. And my computer also started closing my windows and locking up. What should I do? I am not that computer literate, so I need all the help, I can get... Thanks.

leduke · Answer

Blackworm is also known as Grew.a, Grew.b, Blackmal.e, Nyxem.e, Nyxem.d, Mywife.d, Tearec.a and CME-24. It is an extremely dangerous and rapidly spreading Internet worm, which propagates by e-mail via messages with infected attachments and through unprotected network shares.   To remove Blackworm try these automatical or manual Blackworm removal instructions.

ky331 · Answer

while you can certainly try the advice already offered, I strongly believe you have a Vundo-trojan infection, which can be fixed by downloading and running Atribune's VundoFix, per directions here: http://forums.us.dell.com/supportforums/board/message?board.id=si_hijack&message.id=29584

there's a lot of confusion about names here: is Black WORM the same or different from Black MAL ?

Suffice it to say that most people who have come to the HJT forum for help, complaining of a blackWORM popup message [or Amaena popup message], suggesting they can fix it by downloading some "protection" program [usually WinFIxer, WinAntiVirus and/or WinAntiSpyware]... do in fact have a Vundo-trojan problem... and in this case, Atribune's VundoFix is indeed the appropriate cure.

If the problem is in fact blackMAL --- which overwrites/destroys user files (such as those created by Word, Excel, Access, and Adobe), then the preferred method of repair is the Symantec Removal Tool, instructions here:

http://securityresponse.symantec.com/avcenter/venc/data/w32.blackmal@mm.removal.tool.html

actual removal tool here: http://securityresponse.symantec.com/avcenter/FixBmalE.exe

maryabr · Answer

We may have a solution. I went to geekstogo.com where another user posted the same problem. The following URL is the message string: http://www.geekstogo.com/forum/index.php?showtopic=103178   At the very bottom of this very long page, they recommend running their own 'cleaner' called vundo.exe. I followed their instructions, except for the last part about posting and the popups haven't occured yet. Apparently it cleans out a handful of files placed on your harddrive that cause such things to happen.

maryabr · Answer

I have the same occurence. The problem is not the blackworm virus - it's the company that wants you to install their 'virus protection' and is threatening that you may have a virus. If anyone knows how to get rid of this company's ability to make these popups occur, please help us. I have up to date Norton, scanned everything, and have a popup blocker. Somehow it is ingrained into the harddrive.

ky331 · Answer

mary,   looking at the page you listed, if by 'vundo.exe' you meant 'vundoFIX.exe' [by Atribune], that's precisely the 'cure' I had suggested/recommended earlier in this thread.

Virus & Spyware

Was this post helpful?