asked on

cant shake the NYXEM worm

I have recently contracted this damn thing by the strangest of all possible circumstances. Our company virus solutions expired on Jan 11 of this year, and the damn worm came out on the 16th. So, needless to say, no protection for us.

I've scoured the web looking for some decent advice on how to scrub this thing off and can't seem to do it. I have restored our subscription and manually updated some of the machines in the company (about 1/3). the problem is that once I scrub a machine, it comes back.

I have tried the following things:

regedit- removed a few added keys
scheduled tasks - removed any additions and shut off service
deleted all the damn zips that were hiding all over
updated virus definitions

I have tried some other things too. What I want, and I'll pay cash, is something that I can load, run, and not have to do all this manual crap. Is it too late once this thing gets in the door? Or is there anything in hell I can do to stomp this thing out?

ASKER CERTIFIED SOLUTION

zephyr_hex (Megan)

membership

This solution is only available to members.

To access this solution, you must be a member of Experts Exchange.

Start Free Trial

SOLUTION

Rich Rumble

membership

This solution is only available to members.

To access this solution, you must be a member of Experts Exchange.

Start Free Trial

SOLUTION

Will Szymkowski

membership

This solution is only available to members.

To access this solution, you must be a member of Experts Exchange.

Start Free Trial

mwilkans

ASKER

I am heading into work tomorrow to try these out. Will let you know what I find. As always, thank you very much.

Will Szymkowski

No problem. Give it a shot

:-)

mwilkans

ASKER

I tried some of the above suggestions. The symantec tool could not find it on a machine that I knew had it. The problem now is that the thing spreads everywhere in any way that it can. And, our network is such that it needs things that this bug thrives on. I guess I have to come in over the weekend and unplug each machine from the network as I clean it. Thanks for your help.

SOLUTION

Astralmagick

membership

This solution is only available to members.

To access this solution, you must be a member of Experts Exchange.

Start Free Trial

mwilkans

ASKER

I have finally eradicated this crap from my system. I split the points evenly because I actually did use techniques posted by all the contributors and doubt I could have completed it without any of those pieces. Thanks a million, you've all been great.

Mwilkans