Help me get rid of Win32 Netbooster please

Ok so I broke the first rule of downloading and opened a file without any form of protection. I am paying the price as I now have Win32 Netbooster. It has disabled a lot of the programs and I cant even open the task manager. I have run Spybot a few times and at least the pop ups seem to have stopped but I still get the

“Your computer was infected with Worm.Win32.Netbooster.
It’s dangerous for your system, some files can be lost and your browser can be slow!
Click OK to download the antispyware program to clean your computer! (Recommended)”

my internet then takes me to different sites for me to download these antispyware programs. Can someone help please. I have no access to my computer, programs etc as they all have disappeared in the start up menu!!!! I can get to them through other ways though also the laptop is very slow.

I have tried system restore but as this is a new laptop and only 3weeks old the restore is the same night I got the virus.

help

As a general remark never ever follow so called anti spyware software links. They usually lead to more spyware or viruses.

Try running spybot from safe mode and see if that helps.

Thanks for your help, I know how to go to safe mode by pressing f8 but how do I run something ...

If your lap top is only 3 weeks old is there a lot on it you need..... If you made the system discs just format it and start again...

Or you could try this

cut and pasted from yahoo answers

Best Answer - Chosen by Asker
You have unwittingly launched a very nasty Smitfraud program that is falsely reporting "worm.win32.netbooster" as the infection. Smitfraud applications are programs that are used to download rogue security products and change the user's desktop to display false warnings that the computer is infected with spyware.

If your computer has become infected with one of these "spyware removal programs," you probably downloaded an infected codec program when you tried to watch a video online (usually purporting to be an x-rated celebrity video) or you may have been hit by a "drive-by" installation of Smitfraud.

Smitfraud attacks show fake antispyware programs popups on your screen and/or a balloon popup from the windows system tray displaying a warning message that your computer is infected with spyware (here it is falsely calling it worm.win32.netbooster) and telling you to purchase, download & install their program to remove it. Often, it will hijack your desktop and publish a warning message in big letters (with their weblink) on your desktop wallpaper. The infection will usually alter the settings of your current virus protection software (including Norton and McAfee) and render it powerless to delete the infection. The Smitfraud application will also typically disable your ability to launch the task manager with the alt-ctrl-del keys, too.

DO NOT BUY THE ANTISPYWARE PROGRAM THAT IS BEING ADVERTISED ON YOUR WALLPAPER AND IN THE POPUPS. The creator of the bogus popups is an affiliate of the particular antispyware program they are promoting, so each time an unsuspecting user purchases the advertised program in hopes of removing the trojan the person behind the attack gets paid. Not a very ethical way of selling an antispyware, antivirus, or other computer pest removal product.

Here is the 100% FREE solution I found on http://www.bleepingcomputer.com that worked for me:

1. Download and install the Smitfraudfix tool in the link below.
http://siri.urz.free.fr/Fix/SmitfraudFix...

2. Download and install Super Antispyware. Update definitions.
http://www.superantispyware.com/

3. Run both programs (Smitfraudfix first) after you start your operating system is in safe mode. Follow the instructions carefully for Smitfraudfix. Allow Super Antispyware to quarantine whatever it finds.

To learn how to run your operating system in safe mode:
http://www.bleepingcomputer.com/tutorial...

3. Reboot in normal mode. Run the Bit Defender online scan (no download necessary). Allow it to quarantine whatever it finds.
http://www.bitdefender.com/scan8/ie.html

4. Download and run RogueRemover. Select "Scan" and follow the steps indicated. It didnt find anything for me, but it comes highly recommended.
http://www.malwarebytes.org/rogueremover...

You can continue to follow-up with Spybot and AdAware if you desire. Of course, you should also keep your regular anti-virus software up-to-date and scan regularly; hopefully it will be working well again after the infection is removed. Be sure to restore the settings which the Smitfraud program altered. Smitfraud apps are quite nasty, and it may take a while to remove all traces.

Good luck!
6 months ago

This post has been edited by bigbaldybloke: Sep 28 2008, 10:18 PM

Thanks..... running spybot in the safe mode seems to have worked as there are no more pop ups or security alert written on bottom right hand side of the toolbar. I had to do it a few times then reboot and each time it identified a few new ones.
Thanks a lot, I have learnt my lesson ...lol

Most new boxed computers come with a recovery mode/partition that will reload the factor OS image back to the drive.
It is usually accessed from the main menu when you first boot the computer up.

That might be the better option to completely get rid of everything.

Ok so it was working last night and the pop ups etc had gone. So this morning I decided to run spybot again and yet again it found four trojans called virtuamonde.dll. It deleted them. I turned the laptop off went out and now the laptop starts and windows bar goes back and forth and then nothing happens it does not load up. I have tried running it in safe mode but it stops while it is doing all the .sys. Am stuck as the discs that came with the laptop are back in another country!!!! am beginning to think that chucking it out the window will get rid of the B----y virus/worm/trojan or whatever it is.

This post has been edited by kittty: Sep 29 2008, 08:22 PM

Did do all the steps above exactly as listed?

No wanted to do it tonight but it doesn't go further than "windows is starting". It was working this morning after spybot so I though would do this later, however unless it loads I can't run anything and nothing happens even in the safe mode.

May need to use a CD or flash drive boot disk.