Trishk, was it the email that is described here? http://nakedsecurity.sophos.com/2011/02/01/outbreak-post-express-service-malware-attack-spammed-out/

I suggest that you delete it from your Spam Box and make sure it has been deleted from Deleted Messages as well. If you cannot get online, you will need to use a clean computer to download some tools to a USB stick or CD. Will you be able to do that?

 

.

Hi ,

Yes thats the one and I have now deleted it from my spam and email account.  I was just keeping it in case the name was needed to get rid of the worm.

I was told I need to call a Dell technician to get rid of this worm, but what else can you suggest. 

 

Thanks

trish

 

It's up to you. We can try to clean it if you would like to try that first.

If so,You will need the clean computer to access the forum and to transfer tools and logs. You can use a CD or USB flashdrive.

In order to run Malwarebytes Anti-Malware, using the clean computer, download and, rename the program installer "mbam-setup.exe" file to something else like "trishk.exe".  Copy the installer file and the update file to your CD or flash drive.

Transfer the files to the infected computer.  (You would use the update link mentioned below to manually update.) Install the "trishk.exe" file, then run the update so that you will have the current definitions. After that, run a full system scan and select to have the program REMOVE whatever it finds.

  Please download Malwarebytes Anti-Malware and save it to the CD or USB flash drive.
alternate download link 2

• * NOTE: You must rename it before moving it to the infected computer.

After you have renamed it and transferred the program to the infected computer, double-click on trishk.exe to install the application.

• When the installation begins, follow the prompts and do not make any changes to default settings.
• Then click Finish.

Manually download updates from here
Update through MBAM's interface from a clean computer; copy the definitions (rules.ref) located in
C:\Documents and Settings\All Users\Application Data\Malwarebytes\Malwarebytes'
Anti-Malware from that system to your usb stick or CD and then copy it to the infected machine.

On the Scanner tab:

• Make sure the "Perform Quick Scan" option is selected.
• Then click on the Scan button.
• If asked to select the drives to scan, leave all the drives selected and click on the Start Scan button.
• The scan will begin and "Scan in progress" will show at the top.

It may take some time to complete so please be patient.

• When the scan is finished, a message box will say "The scan completed successfully.

Click 'Show Results' to display all objects found".

• Click OK to close the message box and continue with the removal process.

Back at the main Scanner screen:

• Click on the Show Results button to see a list of any malware that was found.
• Make sure that everything is checked, and click Remove Selected.
• When removal is completed, a log report will open in Notepad.
• The log is automatically saved and can be viewed by clicking the Logs tab in MBAM.
• Transfer the log to the clean computer via CD or flashdrive so you can copy and paste the contents of that report along into your reply here and exit MBAM.

Note:-- If MBAM encounters a file that is difficult to remove,
you may be asked to reboot your computer so it can proceed with the disinfection process.
Regardless if prompted to restart the computer or not, please do so immediately.
Failure to reboot normally (not into safe mode) will prevent MBAM from removing all the malware.

-- MBAM may make changes to your registry as part of its disinfection routine.
If you're using other security programs that detect registry changes (like Spybot's Teatimer),
they may interfere with the fix or alert you after scanning with MBAM.
Please disable such programs until disinfection is complete or permit them to allow the changes.

**If you need to re-install MBAM but encounter issue in re-installing, try using the MBAM Cleanup Utility by downloading it from HERE

 

Hi,

Wow alot of info for someone not very literate about computers but I'll give it a go.  I'm going to print your instructions and make sure I understand

it before actually doing what you've said as I don't want to screw up my laptop anymore than it already is.  May take me a day or so, but I will be back

in touch with any questions and or progress.

 

Thanks so much for your time and help

Trish

 

Yes, please print the instructions and read them over before you start. If you have any questions ask before you begin.

You cannot use the computer in its infected state, so being concerned with messing it up is not a issue at this point. Malwarebytes' Anti-malware is safe to use. The biggest problem is getting it to run on the infected machine. The worst that can happen, and what Dell paid support may tell you to do is to reformat/reinstall the operating system.  That is more trouble than what you will be doing here, so we'll try this first before you go there.

Hi,

there are several webb sites for Malwarebytes. one is the malware...org, another says its the latest and is at softlate.com.  Which one should

I use?

Trish

Hi again,

I see now that I have to access Malwarebytes via your email and have done so.  It puts me into a web site  Major Geeks online store where I

have to buy aconsumer license and option for extended license for total of about £19.  Is this correct?  There is also something about a license

for 24$. on link 2

 

trish

All the tools that we use here are FREE versions. You do not need to  purchase anything unless you want an upgraded version with realtime scanning and automatic updating. You do not need a paid version right now, and have the option of upgrading later if you choose to do so.

If you click on the first link that I posted above, it takes you to a download hosting site that gives you a choice to Download or Purchase. Click on Download for the free version.

If you click on the second link, it takes you to Majorgeeks. That one gives you the option to Download (the free version) from one of download mirrors or purchase a license for the upgraded version.

 

* The email notifications are sent as simply a reminder that I have replied so you can return to the  forum. The emails may not include all the information that you need, so it is best to come to the forum to read the entire post, rather than trying to work from the emails..

The first link is for BestTechie which redirects to here: http://fileforum.betanews.com/detail/Malwarebytes-AntiMalware/1186760019/1

If you are being redirected to softlate.com, on your "clean" computer, we might need to check that one for malware as well.

When I click on the first site you gave me, it sends me to Major Geeks as does the second site.  I'll check it out again and see if I can find the

free download on Major Geeks.

 

Trish