Worm detected [SOLVED]

[Skill_Caster]

Hey guys. I'm kind of frightened. Last night during a daily scan AVG Anti-Virus 8 Free picked up an internet worm called "Feebs.KI". I have no idea how I might of contracted it. I'm more cautious than your average PC user. I run Windows XP Home SP2, browse using Firefox 3 with WoT. For security protection I have AVG 8 Free, ZoneAlarm Firewall, Spybot Search and Destory, AdAware. That's about all I can think of. AVG rid of the worm, but the event is causing my paranoia levels to rise to unhealthy amounts. I don't go to unsafe sites (literally, I don't go to sites rated below the darkest green on WoT), I don't illegally download anything at all, so I don't know. Apparently in some of my Googling the worm has a rootkit function, which is really freaking me out, but not near as much as the fact it may send out confidential information...Please help. How can I be sure that my system is 100% clean? Thanks.

 

 

 

-Skill

 

 

 

More Info: The worm was detected 4 times, each in a .zip folder containing the Royale Vista theme.

[OldJoe]

How you might have gotten infected:

 

http://www.pandasecurity.com/homeusers/ ... rticulares

 

 

 

AVG has gotten bad reviews during the last 12 months, try another av, such as Avast or Avira.

 

You can also check with Panda online scanner (perhaps other companies offers online scanners also?) if you don't want to pick up a new av.

[Skill_Caster]

I'm going to try avast. I really hope it helps =/ I'm still freaked out. Your advice is very much appreciated. It's going to be hard, I've used AVG for a LONG time, but how should I switch? What do I install/uninstall first?

 

 

 

EDIT: Wait. I thought avast! was free. It says it's free during the 60 day trial period...what gives?

[OldJoe]

I usually download the new av first, disable the internet connection (yes a bit paranoid by that bit), uninstall the current program, reboot, install the new av (reboot if necessary), enable internet again, update the av and then run a scan.

 

 

 

Avast offers both pro and free version, but either way you choose you gotta register and then you can continue using it after the 60 days.

[Skill_Caster]

I usually download the new av first, disable the internet connection (yes a bit paranoid by that bit), uninstall the current program, reboot, install the new av (reboot if necessary), enable internet again, update the av and then run a scan.

 

 

 

Avast offers both pro and free version, but either way you choose you gotta register and then you can continue using it after the 60 days.

 

 

 

It says if you register it you get a 1-year license. Oh well, I'll try it. And the internet connection isn't paranoid to me, that's exactly what I was planning to do.

[OldJoe]

Yes, that's what i meant. You need to register to get the 1 year license. A bit annoying, but it's free!

[Skill_Caster]

I did the install/uninstall process. It looks like a media player...is it supposed to look like that? It's kind of odd. In fact, I'm not really sure about the entire interface yet. There's no direct way to access the 'media player gui' from the taskbar like you could in AVG, all you have is two icons, one with an I and one with an A. I dunno, is this good? Anyways, running a 'throughout' scan now. Wish me luck.

[blade995]

I always found Avira antivirus to be more user friendly than Avast but that's more of a preference. You always don't have to register.

 

 

 

Since your pretty paranoid about security, update XP to SP3. It contains many security fixes and improvements.

 

 

 

A hijackthis log will always help. Post one after you scan and remove anything that your antivirus finds.

[Skill_Caster]

I always found Avira antivirus to be more user friendly than Avast but that's more of a preference. You always don't have to register.

 

 

 

Since your pretty paranoid about security, update XP to SP3. It contains many security fixes and improvements.

 

 

 

A hijackthis log will always help. Post one after you scan and remove anything that your antivirus finds.

 

 

 

Did a 'throughout' scan with Avast and it only found 1 type of malware (worm) with is apparently very old (like 1999). I'll tell you something, Avast sure lets you know if it discovers a virus with a nice, welcoming, completly expected blaring siren and "WARNING: VIRUS HAS BEEN DETECTED" vocal clip at 2am in the morning. I'm going to do another one of those deep scans overnight. When I wake up, if there's nothing detected, I'm just going to suck it up and (un)rest assured. I'll check out Avira tomorrow, because I'm with your personal preference. Avast is very, very great, but not in terms of user-friendliness (its interface design is supposed to be a media player). Thanks for all the help everyone. I'll still leave this as unsolved until I've confirmed everything is safe however.

[Skill_Caster]

Sorry for the double post, but I think everything's clear. Haven't completed the next scan (therefore haven't gone to bed yet...), but I've been reviewing different free anti-virus solutions and I think I'm going to stick with Avast. As long as I turn the freaking stupid sound effects off, and get used to having a media player design on my virus scanner, I'll be ok. I mean, I was going through the Resident Shield and popped up the Internet Shield...it's currently actively scanning the album art on my Pandora station. While there is completly no need for that, it defiantly does let me rest assured that Avast is checking every nook and cranny (right as I visit websites) and that Avast provides decent protection if not the best there is for a free anti-virus. Thanks for the help guys. It's very, very, very much appreciated.

[Sbrideau]

One thing though, Avast has a lot of false positives, so it would be a wise choice to look up what it finds before deleting it. I speak of experience.

[Skill_Caster]

To be honest, I'd rather have a lot of false positives than a lot of undetected positives. Third scan proved clean. Thanks for the quick help everyone!