Home > Infected By > Infected By WORM_NUCRP.GEN


Patrick?s Day? Thanks Back to top Back to Am I infected? Because of this, most anti-virus programs encrypt their definitions so that they do not trigger a false alarm when scanned by other security programs. What do I do? Source

The best method for avoiding infection is prevention; avoid downloading and installing programs from untrusted sources or opening executable mail attachments. Register now! It can maliciously create new registry entries and modify existing ones. However, Trend Micro strongly recommends that you update to the latest version in order to get comprehensive protection. https://www.bleepingcomputer.com/forums/t/117430/worm-nucrpgen/

Advertisements do not imply our endorsement of that product or service. Users are then prompted to download a fake version of ActiveX Object, detected as WORM_NUCRP.GEN.

For additional information about this threat, see: Description created:Jan. 25, 2008 9:53:22 AM GMT -0800

When you return to make your next post, make sure you attach the following logs and that you have run these scans in the following order too: CounterSpy Log - only Norton A/V 2007 doesnt show it, but a scan with AVG says the PC is infected with worm_nucrp.gen.

bjgarrick, Oct 12, 2007 #2 (You must log in or sign up to reply here.) Show Ignored Content Share This Page Your name or email address: Do you already have an On windows XP: Insert the Windows XP CD into the CD-ROM drive and restart the computer.When the "Welcome to Setup" screen appears, press R to start the Recovery Console.Select the Windows Please note that these conventions are depending on Windows Version / Language. Perhaps they are attempting to emulate the millions of ridiculously early marketing campaigns attempting to entice us into spending our cash on trinkets for our ?loved ones?.Despite the Dorf spammers?

Logfile of HijackThis v1.99.1 Scan saved at 12:23:05, on 2007/10/04 Platform: Windows XP SP2 (WinNT 5.01.2600) MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180) Running processes: C:\WINDOWS\System32\smss.exe C:\WINDOWS\system32\winlogon.exe C:\WINDOWS\system32\services.exe C:\WINDOWS\system32\lsass.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\System32\svchost.exe C:\WINDOWS\system32\ZoneLabs\vsmon.exe Users may need to terminate worms before they can be deleted. This is very important due to some new infections going around.. In My Dreams".

The log file is below. Overview Aliases Behavior Risk Level: MEDIUM Threat Name:WORM_NUCRP.GEN Threat Family:WORM_NUCRP Type:Worms Subtype:Worm Date Discovered: Length:216064 bytes Registry Clean-Up Tool:Free Download Company NamesDetection Names AviraTR/Crypt.ULPM.Gen exact)(F-ProtW32/Downloader.SUQ KasperskyPAK:PE_Patch.Sue McAfeeNew Malware.q !! The purpose is to remain undetectable, protect other malicious programs it downloads, start up when the computer boots, and ultimately take full control over your computer. Step 4 Click the Install button to start the installation.

etc. After I ran the virus detector it said the file infected by this malware is C:\WINDOWS\system32\winavxx.exe and that it can't be removed. Refer to this Microsoft article for more information about modifying your computer's registry. To get rid of WORM_NUCRP.GEN, the first step is to install it, scan your computer, and remove the threat.

Worms such as WORM_NUCRP.GEN are one of the most destructive forms of malware. this contact form Tech Support Guy is completely free -- paid for by advertisers and donations. Most of what it finds will be harmless or even required. For example, if the path of a registry value is HKEY_LOCAL_MACHINE\software\FolderA\FolderB\KeyName2,valueC= sequentially expand the HKEY_LOCAL_MACHINE, software, FolderA and FolderB folders and select the KeyName2 key to display the valueC value in

Join our site today to ask your question. Each anti-virus will attempt to remove the offending file and quarantine it. Please reach out to us anytime on social media for more help: Recommendation: Download WORM_NUCRP.GEN Registry Removal Tool About The Author: Jay Geater is the President and CEO of Solvusoft Corporation, have a peek here crjdriver replied Feb 12, 2017 at 8:10 PM Loading...

Then if I do click yes it takes me to a website that says the signature of the file cannot is not known -- which means it is probably a hoax. Come back here to this thread and Paste the log in your next reply. Troj/SpyDldr-C Adware.Iefeats What are Worms?

Click Start>Run, type REGEDIT, then press Enter.

Once reported, our moderators will be notified and the post will be reviewed. Step 16 ClamWin starts the scanning process to detect and remove malware from your computer. Important Windows ME/XP Cleaning Instructions Users running Windows ME and XP must disable System Restore to allow full scanning of infected computers. Wantvi may even add new shortcuts to your PC desktop.Annoying popups keep appearing on your PCWantvi may swamp your computer with pestering popup ads, even when you're not connected to the

Username Forum Password I've forgotten my password Remember me This is not recommended for shared computers Sign in anonymously Don't add me to the active users list Privacy Policy

Log McAfee┬« for Consumer United StatesArgentinaAustraliaBoliviaBrasilCanadaChile中国 (China)ColombiaHrvatskaČeská republikaDanmarkSuomiFranceDeutschlandΕλλάδαMagyarországIndiaישראלItalia日本 (Japan)한국 (Korea)LuxembourgMalaysiaMéxicoNederlandNew ZealandNorgePerúPhilippinesPolskaPortugalРоссияSrbijaSingaporeSlovenskoSouth AfricaEspañaSverigeSchweiz台灣 (Taiwan)TürkiyeالعربيةUnited KingdomVenezuela About McAfee Contact Us Search ProductsCross-Device McAfee Total Protection McAfee LiveSafe McAfee Internet Security McAfee AntiVirus Plus McAfee Jump to content Sign In Create Account Search Advanced Search section: This topic Forums Members Help Files Calendar View New Content Forum Rules BleepingComputer.com Forums Members Tutorials Startup List http://secondsolution.net/infected-by/infected-by-myspace-through-msn.php Back to Top View Virus Characteristics Virus Characteristics This is a Trojan File PropertiesProperty ValuesMcAfee DetectionDownloader-ASH.genLength7015 bytesMD527e019cd4b1550c68e1f019c10494092SHA16f173d4a1cb0fe4a02d65e749c76c9a488c71b54 Other Common Detection AliasesCompany NamesDetection NamesahnlabWin-Trojan/MalPatched.GenavastWin32:Tibs-BEDAVG (GriSoft)Downloader.Tibs.7.GaviraWORM/Zhelatin.GenKasperskyPacked.Win32.Tibs.bfBitDefenderTrojan.FakeAlert.TKDr.WebTrojan.Packed.142F-ProtW32/Heuristic-210!Eldorado (suspicious)FortiNetW32/Tibs.BF!trMicrosofttrojan:win32/tibs.dcSymantecTrojan.Packed.13EsetWin32/Nuwar.Gen wormnormantibs.gen132pandaTrj/Tibs.AISophosMal/TibsPk-ATrend MicroWORM_NUCRP.GENvba32Trojan-Downloader.Win32.Revelation.Tibs.BV-BusterTrojan.Tibs.Gen!Pac.132 (trojan)Other brands

These conventions are explained here.Select the file or folder and press SHIFT+Delete on the keyboard.Click Yes in the confirm deletion dialog box.IMPORTANT: If a file is locked (in use by some Once connected, it acts as a backdoor that allows a remote malicious user to issue commands locally on an affected machine. Each anti-virus will often interpret the activity of the other as a virus and there is a greater chance of them alerting you to a "False Positive". Step 11 Click the Fix All Selected Issues button to fix all the issues.

Issues can arise when the active anti-virus detects the non-active one's definitions or quarantined files.The primary concern with using more than one anti-virus program is due to conflicts that can arise JoeNee Private E-2 I am having a problem with my computer....my homepage is constantly reset to www.google.com and there is a popup window that appears on the screen every couple of