DIGIT-ARC read-only archive · snapshot: July 23, 2026

DIGIT-ARC / Software / Software Q&A

Goddamn worm!!!!

11 posts · originally from https://geek.digit.in/community/threads/goddamn-worm.163322/

P
paul.rohit Original post #1
Sep 14, 2012 at 7:02 PM
i unwittingly had clicked on a suspicious facebook link which led to my computer being affected by a worm called the "slenfbot.gen!g".quick heal did not detect anything. this led to two things happening.

1) i got alerts from windows action centre about the worm and had the option to delete or quarantine it. I removed the worm but every time i turn on the machine/ restart it the worm cropped up again. i updated windows definitions and after a native boot scan by quick heal that no longer happens.

2)but the 2nd pop up that used to appear saying "c/windows/SysWOW64/svchost.exe" is trying to send emails and is not a trusted email client. ive always clicked no to this option. im pretty sure this is because of the worm as well.when i scan this file with quick heal it says its virus free which im sure is not true.

please help and advise me on what to do.
dashing.sujay
dashing.sujay #2
Sep 14, 2012 at 8:28 PM
1) Stop using Quick Heal.

2) Use ESET, update it and get rid of all viruses/worms after scanning the PC.
doomgiver
doomgiver #3
Sep 17, 2012 at 12:31 AM
download "Unlocker" software.
go to task manager
find the offending worm process (look under the image path name column, it will be something like "c/windows/SysWOW64/svchost.exe")
kill the process
immediately right click the program/worm in windows explorer, and select unlocker option
then, choose the "delete" option from the drop down menu, or if it shows a large screen with multiple lines and processes, choose "kill process" and "unlock all" along with delete option.

this will delete the worm 7/10 times.

do this preferrably in safe mode.

reboot and see if it remains

and yeah, **** anti-viruses. i've never used one, and im still virus-free.
Anorion
Anorion #4
Sep 17, 2012 at 12:40 AM
hmm. spyware doctor.
topgear
topgear #5
Sep 17, 2012 at 3:36 AM
@ OP - use Avira/AVG rescue disc to scan the pc.
Zangetsu
Zangetsu #6
Sep 17, 2012 at 1:47 PM
@paul: get an anivirus which has all the features of spyware/adware etc (if need be paid one)
but remove quick heal...

update the virus definitions to the latest & scan full system
P
paul.rohit #7
Sep 17, 2012 at 2:34 PM
ok im gonna use another antivirus before i try the safe mode thing. thanks guys. ill update you if it works
N
nghtcrwlr #8
Sep 17, 2012 at 2:38 PM
And if it does not, use Combofix.
Anorion
Anorion #9
Sep 17, 2012 at 2:44 PM
try anti spyware
combofix is good
so is spybot

run 2-3 scans from 2-3 diff software one after the other

also maybe use registry mechanic after the above depending on the severity
meetdilip
meetdilip #11
Sep 17, 2012 at 9:59 PM
Use Malwarebytes and do a full system scan.