Sunday, March 4, 2012

Simply Busy: Agent. NEC.Worm and MORE!!!

Have you ever felt as if you're running out of time. And that waking up at 7 am in the morning and sleeping at 4 am in the morning just isn't enough for you to finish your tasks.

Well, here's the thing, I'm having such an episode now. I'm currently staying up this late due to waiting for a virus scan to finish. Who would've thought a computer could have so many viruses and worms left unattended.

Some persons simply don't care when their computer gets viruses. Take for example this laptop I'm currently trying to file transfer. One of the worm it had was an Agent. Nec.Worm.

Just my luck, it hides the files and distributes the folder names with a replicated application having the same name e.g. the bookeeping folder will no longer appear, however a bookeeping.exe does. Once the person unknowingly clicks on it, it replicates itself until you're left with a hard drive filled with it.

If the virus scanner deletes or quarantines all those exe files. Worry not! This worm simply hides those folders so that you won't be able to see him.


1. Open Command Prompt (Start>Run> Type in CMD
2. In the Command Prompt, type in the directory where the files were currently located. If the infected thumb drive is F: Type cd .. (until you're left with C:\ and type in F:\)
3. Then type this after F:\ -attrib -s -h /s /d *.* (this will remove the hidden attribute of those folders and files, so they all show up.

Not only do I have to deal with this, but there were more viruses in that computer than viruses in my computer for the entire time I've owned a computer... Imagine scanning more than 453 viruses, trojans and worms in the Document Folder alone(97 of which were successfully cleaned)... And that's only the tip of the iceberg. We have ALS\Busted.E.virus, Brontok S.worm, Win32/Agent. BFJDRPI trojan, ScrInject.B.Gen virus, JS/ TrojanClicker,Agent.NCQ trojan and AutoRun.Autoit.BJ.worm.

I couldn't even install an anti-virus because a Error 1500 keeps on popping out. And Housecall and Kaspersky free antivirus scanner didn't do a thing. You might be wondering what I had done to have a partial list of these malware. I removed the hard drive and scanned it into another computer running on my favorite AV program.

I've even tried going to the registries to delete the value contained in the string of  "InProgress" and disabling and switching to manual the Windows Installer through services.msc.

Seriously. Not only is this computer really old, but it was running pretty slow.