Worm.Win32.Netbooster Removal Instructions (Netbooster)
April 27th, 2008 | by Karen |Worm.Win32.Netbooster (also know as Worm.Win32 or Netbooster) used to be a real virus, now fake anti-spyware software like IE Defender will display Worm.Win32.Netbooster as their scan result to trick user to buy the fake anti-spyware program. The fake anti-spyware program usually get installed onto your PC without your permission, through Trojan, malware and virus (or you could get it by installing a fake video codec). fake anti-spyware will display the Worm.Win32.Netbooster fake system alerts or fake security alerts to trick user to buy the Paid Version of the fake anti-spyware program.

The possible error messages are either “Your browser was hijacked by Worm.Win32.Netbooster”, or “Your browser was hijacked by Worm.Win32.Netbooster”. As discussed previously, these messages are completely misleading. You can safely remove Worm.Win32.Netbooster by following our manual removal instructions if you are familiar with regedit and dll files. Good luck!
Download SpyHunter* Spyware Detection Utility
Manual Worm.Win32.Netbooster Removal Instructions:
Unregister Worm.Win32.Netbooster DLL Files:
(Learn how to do this)
stream32a.dll
msvideo.dll
windivx.dll
websrc32.dll
mscfg32.dll
pdswin.dll
ecxwp.dll
pmspl.dll
vipextqtr.dll
Find and Delete these Worm.Win32.Netbooster Files:
(Learn how to do this)
mscfg32.dll
cjvy.dll
vtssp.dll
ttvbonvgl.dll
ssqppol.dll
gqagksr.dll
esent9.dll
pmspl.dll
windivx.dll
msvideo.dll
ecxwp.dll
stream32a.dll
websrc32.dll
mlljh.dll
urqnomm.dll
Remove Worm.Win32.Netbooster Registry Values:
(Learn how to do this)
c4545fc9-26d0-4ccf-b4fb-728aed895dbd
BBB05D9E-0297-404D-A6BF-D8F2876B84A6
F9EAAA11-DF98-4615-A2C7-7D03C86A6BE9
202EBB90-ABD4-46CC-BB5A-4F0ECC67B331
62EA9201-8CC7-4199-AC30-7744F836322E
b166be07-30a4-4d38-b781-44528a630706
D17CFF74-A19C-4C36-821A-E074E4F889CA
15EB9F40-D775-4463-B75B-8687B3C66BB7
E856E05E-1B91-4339-9EFC-9A3308CB5491
B3E45A9B-7756-46A2-AB14-90175CD374F9
69B98C68-D2B8-4A4E-9CB7-E85B6F3A7014
A8565FBC-8D53-4D4F-9BB0-CBC68A22B126
43BA0532-0D69-458A-8C71-AD0F6AE70D19
6D64B03B-3B93-4AF2-BFC6-01264A4C7F2A
6A719349-BDF5-4268-9019-4ACA0C2562D2
Download SpyHunter* Spyware Detection Utility.
Worm.Win32.Netbooster Variants: Trojan.Win32, Worm.Win32 and Trojan.Win32.Obfuscated.gx
















45 Responses to “Worm.Win32.Netbooster Removal Instructions (Netbooster)”
By TJ on Apr 16, 2008 | Reply
Thanks for your guide. I got this nasty b*tch out of nowhere.
By Dick on Apr 16, 2008 | Reply
Worm.Win32.Netbooster is not a spyware. It’s just a misleading error message generated by Malware Bell. Be awared!
By Tin on Apr 17, 2008 | Reply
Haha.. NetBooster! What a nice name for a spyware.
By stevewpb on Apr 20, 2008 | Reply
Why isn’t anyone going after the companies that cause this issue.
By AJ on Apr 23, 2008 | Reply
Worm.Win32.Netbooster has bothered me for the last two hours. I really need some help here. Please email me the method to remove Worm.Win32.Netbooster. Much appreciated!!!
By Druglord on Apr 27, 2008 | Reply
Damn it. I got this via a bad website and I couldn’t get rid of it no matter what I tried. I can’t play games online anymore. Help me…
By mastermind on Apr 27, 2008 | Reply
me too… so please help me :-s I My pc was so slow and install a program that i didnt installing it. Many programs in my pc that it could not run anymore, i am second thought that if i am going to re-format my hardisk. tsk tsk tsk. . . pm me in ym >> diamondsbak@yahoo.com, thankssss. . . .
By Jerome on May 5, 2008 | Reply
Thank you for this thread … I downloaded spyhunter but found that I have to buy it in order to remove the spyware, hence I will attempt to remove it manually … thank you
Regards,
Jerome
By D. G. on May 7, 2008 | Reply
I was unable to find any of those files to unregister/delete/change. So, I ran Spybot, Adaware, Spy Hunter 3, and Symantec Antivirus…deleted the questionable registries…ran CCleaner emptied Recycle Bin and Restored the System to 3 days prior to the infection date. It apears to be running fine, now. We’ll see.
By Jennifer on May 11, 2008 | Reply
OMG this bug is hard to kill!! It messed up my antivirsu and spyware removal programs and for some odd reason I can not even do a system restore for before today!! I ahve been trying to erase this all night!! Any tips???
By frustrated on May 13, 2008 | Reply
Help! When I try to unregister these files, i get an error that says they cannot be found. What to do next? I can’t run Norton or Spybot or anything since i get an error that reads there is no program associated with this file.
By Sickles on Jun 2, 2008 | Reply
Quick question: If I find more than 1 .dll file with the same name, which ones do I keep-If any-and how do I know? For example, pmspl.dll is in C:\WINDOWS\system32 and C:\WINDOWS\system32\dllcache, also in WIN98SE, WINME, and WIN98. Help soon…
By Woddworker 100 on Jun 6, 2008 | Reply
The people that make these stupid parasitic programs should be thrown in jail for years. With technology as widespread as it is and as much as it controls, these people are as good as terrorists.
By khoen on Jun 22, 2008 | Reply
the persons that are behind this fucking virus is people that worked at myfreedom 1 year ago. now they have created this shit virus using the companys technology. am so pisssed off!!!!!!!!!!:S
By Cookie on Jul 8, 2008 | Reply
All my programs lost from the start menu. this thing keep on popping in my window. This biohazard in red background is a nuisance. It attach VIRUS ALERT! in my clock. @#$% sh!t!!! Its been with me for 1 day. I cannot do anything. Need help badly…..
By Syed on Jul 10, 2008 | Reply
I have got the same virus just by surfing net. now i am unable to do any thing. It seems that re installation will be the ultimate solution because the manual instruction are not working. the creator of this spyware might have change the names of ablve DLL files because they are not found while following the above instructins.
By Chris on Jul 22, 2008 | Reply
I have inadvertantly infected my laptop with worm.win32.netbooster and I acn’t get rid of it. I have paid to upgrade my AVG antivirus software, but it cannot get rid of it. When I click on my “start” button the “all programs” button has disappeared and so has the “control panel” so I cannot go into “add or remove programs”.
Please help!!!!
By Rory on Jul 23, 2008 | Reply
Chris – My Dad has same problem and Im looking for him but we managed to right click on the start menu and explore from there. Found Add/remove programs from there as another website has said that these things (if you know what you are looking for) can be uninstalled in some cases. However since its his computer I have no idea what program is what…but anyhoo right click and go from there.
By Molly on Jul 23, 2008 | Reply
In order to access your programs you have to right click start and set it to custom settings. After that you can access run and search. Go to Search and click on “All Files and Folders” and after that set the “Look in” thing to “Local Hard Drives(C:)” and in the search area type in dll. After that find the dll file that was created on the date you got the virus and right click on it and go to “Open Containing Folder” this will take you to the folder where the virus is which will most likely be “System 32″. Do not just start deleting files because then you will destroy your computer. Find the dll file and delete it. It probably won’t work because it is in use by another person or application. Try renaming the file and replacing “.dll” with “.doc” and then move it. Once again, this may not work and if it doesn’t try googling how to delete it.
By Patricia on Aug 5, 2008 | Reply
In order to remove this spyware do I have to follow this 3 steps (unregister, find and delete and remove) or just one of them? Thanks a lot for this thread
.
By Edwin on Aug 6, 2008 | Reply
This stupid virus has been on my computer for 2 days now. I tried spyhunter 3, trend micro, spydoctor and cc cleaner. I can’t do it manually because when i try to access my regedit.exe start>run>regedit.exe it says administrator has disabled it but i didn’t disable it.
If anyone knows how to enable my regedit.exe, please e-mail me or post on this site i’ll be checking here daily until i get this virus out of my computer.
Definition_E@yahoo.com
By Dave on Aug 10, 2008 | Reply
I have also picked up this annoying pain in the butt.
If anyone can point out the responsible arsehole that created this crap would they please tell me where to find him/her because I will put a small Lead anti virus pill between their eyes and deleat them permanently.
By mitch on Aug 11, 2008 | Reply
pls help me remove this bug!i almost delete all my files hoping to delete it!heLp me pls??
By Duckcmdr on Aug 12, 2008 | Reply
Got it last night!! manual clean didn’t work. I can’t use anything. when i turn my cpu on it starta up then goes to blue screen and say shutting down to protect hard drive!! Damn It!! Need Help!!!
By blarg on Aug 16, 2008 | Reply
ya i got the bug but when i try to unregister/delete the files it says it cant find em. i also have the thing where my start menu doesnt show the all programs buttom and the c drive doesnt show when i look in My Computer. So could somebody help me please….PLEASE. thanks
By wap on Aug 20, 2008 | Reply
I have the same problem as Chris above, I have inadvertantly infected my laptop with worm.win32.netbooster and I can’t get rid of it. I have paid to upgrade my AVG antivirus software, but still cannot get rid of it. When I click on my “start” button the “all programs” button has disappeared and so has the “control panel” when I do a search, there is no C: drive. please help…
By charistech on Aug 20, 2008 | Reply
Having the same problem with my grandpa’s computer. The part that seems to be crippling us is the administrative permissions setting that we cannot change. We have the same problem as some of the other posts about not having permissions to access files. I can’t even install or repair programs. Any help would be great! Thanks!
By Meng on Aug 23, 2008 | Reply
in safe mode use smitfraudfix to remove the desktop picture.
To restore your programs to the All Programs menu, try this:
Go to Start>> Run. Type in: regsvr32 /i shell32.dll [Enter] or click OK.
if your all program menu is missing:
Start>Run>Regedit>ok
Now navigate to the following keys:-
HKEY CURRENT USER\Software\Microsoft\Windows\CurrentVersion\Explorer\User Shell FoldersSet Start Menu value to “%USERPROFILE%\Start Menu”
HKEY LOCAL MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\User Shell Folders Set Common Start Menu value to “%ALLUSERSPROFILE%\Start Menu”
Close the registry editor and restart the machine.
if your task manager is disabled:
Click Start, then click Run, type in regedit, and click on OK.
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\System
Then, Right Click on the DisableTaskMgr item and press delete.
if your control panel is disabled, in
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\System
# if you have an entry for NoDispCPL, double click it to open it
# If not you can create it by going to the Edit menu and selecting New and then DWORD value
# Enter a name of NoDispCPL and press enter
# Once you have this entry you should double click it and set the value to 0
if you find your C: or D: icon missing in your computer and yet you can access it by typing
C: in the command prompt, you can enable it by using the TweakUI. after opening tweakUI, go to My computer tab and open it, under the drive tick the drive you want it to appear in My Computer
By cheese on Aug 30, 2008 | Reply
I got it somehow too. Real pain. Here’s how I got rid of it quickly. Start windows in safe mode (press f8 repeatedly when you restart the computer), there I had the option to choose “administrator” or my regular user name. I clicked “administrator”. Then you have access to all the things that went missing when the virus started. Do a system restore from there (start> all programs> accessories> system tools> system restore). So far, this has corrected my problem with the virus. Time will tell, but it seems to be gone. Hope that helps.
By BrianBfromUMD on Aug 30, 2008 | Reply
If the restore point doesn’t work, then you should try to manually remove the virus from the administrative account in safe mode (keep pressing F8 like a madman as the PC boots) by following the guidelines posted. I’m fairly certain a system restore should work. Anyways after this incident I think I’m going to make my system checkpoints more frequent. Just in case.
By gabeb on Sep 15, 2008 | Reply
system restore worked good for me…so far…
By Josephh49 on Sep 22, 2008 | Reply
I’ve had this virus for two weeks, been unable to get rid of it. All my system restore points are labeled “Virus Alert”, and the machine will not restore. Has anyone had any experience with the Spyhunter program noted above. I’m willing to pay for it, just want to be reasonably sure it works. Thanks.
By simone on Sep 26, 2008 | Reply
this is evil im trying to sort this out for a m8 and lots of diffrent websights keep coming up trying to sell stuff to me also porn one one of the download sights it sends me 2 it trys to sell you that. ive looked for the files to try and remove them and no dice cant find them think kicking it might help every thing elce had failed
By Crys on Sep 27, 2008 | Reply
got this monster about 5 hours ago. my husband rebuilds computers. he knows what he is doing and he could not remove this thing. it changed our admin password. would not allow us to do a system restore or anything else. my C and D drives, control panel, taskbar, everything was hidden. i also had all the popups with warnings and alerts saying i was infected to purchase this or that program to remove the viruses. good luck to anyone that gets this monster because you will need it!
By Patt on Sep 29, 2008 | Reply
This is what I did to get rid of the worm.win32.netbooster AND IT WORKED! I’m running winxp if that makes a difference, but it’s worth a try even if you aren’t.
1. Restart in safe mode – keep hitting f8 when restarting – then use your up/down arrows to
2. choose SAFE MODE….then
3. choose ADMINISTRATOR….then
4. when screen comes up, open START…then
5. choose ALL PROGRAMS….then
6. choose ACCESSORIES…then
7. choose SYSTEM RESTORE….then
8. choose the date you want to restore from AND FOLLOW THE DIRECTIONS FROM THERE.
VERY EASY TO DO! GOOD LUCK
By nan on Sep 29, 2008 | Reply
Thanks for the method. It works fine me. I don’t see “worm.win32.netbooster” error again. good luck to those who try to do this.
By Lang on Oct 2, 2008 | Reply
Worm.Win32.NetBooster is a very nasty combination of things. It disables your task manger, AND disables your regedit. Will following all of those steps re-enable the two?
By John on Oct 4, 2008 | Reply
It seems all of my System Restore points have been tainted with a “VIRUS ALERT” message, so no matter how far back I go, whenever I complete system restore no changes are actually made. Did I just get copped with a smarter version of NetBooster???!
By Jesse on Oct 4, 2008 | Reply
hey yeh iv tried doing that safe mode stuff but the screen just pops up with the comput scripts and stuff….
By Corey on Oct 5, 2008 | Reply
Worm.Win32.Netbooster is such a pain to delete.
By Tami on Oct 6, 2008 | Reply
What the hell???
I have been fighting with this thing all night. I have absolutely no idea where I got this from. I didn’t do anything different than I do everyday. And I am the only one who uses my computer. I think it’s bogus that people have nothing better to do with their time than make other people miserable. A**holes!!!!!
By sanjay on Oct 12, 2008 | Reply
hi,i am one more victim of this bloody worm.
i am fiting with this from last night,& i m facing all above mentioned problems.
& now i m even unable to boot my laptop.
can anyone help me out in trouble shooting this problem.
& i swear if the makers of this worm will come b4 me i ll definately kill those basterds
By Dougie on Oct 16, 2008 | Reply
I’ve read this thread and my problem is I can’t get into safe mode. I use F8 then choose safe mode. Next screen says start winxp with safe mode in blue at bottom left. I press enter but get bumped back to the previous screen. I got into safe mode once in about 20 attempts but then got a box saying “Windows XP setup cannot run under safe mode. Setup will restart now”. Any help appreciated.
By Andy on Oct 24, 2008 | Reply
Hello Guys,
My Laptop is badly affected by this virus.. this bloody worm has mad me so much trouble.. Im fighting with it since last night.. any one can help me how to overcome??
Pls pls pls pls..
I will be veruy thankful to you
By stacy on Jul 17, 2009 | Reply
my neighbor downloaded this SOB by mistake yesterday.. by the time i got home it was pretty much settled in (she knows very lil about puters) i am the one who gave her this computer. i ran Avast on her computer last night. seemed to work for a few hours after the antivirus software got rid of the virus.. but guess what its back! im printing this page to take it over to her house and see if i can get rid of this SOB once and for all thank you for all your helpful advice