Win32/Ambler.A worm on Dell Inspiron Desktop

[Juan-Carlos]

I have purchased the Dell Inspiron Desktop 560 (S241205IN8) last week. It has an Intel Core2 Duo E7500 processor and Genuine Windows 7 Home Premium 64bit operating system. I also set up a new internet connection from Hathway for my Dell desktop. I also installed the Norton Internet Security anti virus, but still my Dell desktop is attacked by the Win32/Ambler.A worm. How to deal with it?

[Zachary]

The Worm: Win32/Ambler.A is a information stealing malicious code. This worm propagates through removable drives such as flash drives or networked drives. The main intend of this worm is to pass the secured information to the hacker from the infected machine. Thus it is very crucial to detect and delete this worm.

[Spyrus]

Even my Sony Vaio laptop was infected by the Win32/Ambler.A worm. I was successful in deleting the worm using my McAfee anti virus. But I had researched about this worm and following are the symptoms of the Win32/Ambler.A worm:

• idm.dat
• bx.dat
• o6.dat
• q1.dat
• br1.dat
• nk.dat
• ca.dat
• xd.dat
• o3.dat
• l4.dat
• jc.dat
• pld.dat
• m1.dat
• ck.dat
• c2d.dat

If the following files are present in your computer then your computer is most probably infected by the Win32/Ambler.A worm. The best solution would be to contact your computer technician to sort his assistance to remove the worm.

[Shen]

The worm is a password stealing worm. This worm is designed by the attacker in a sense to decrypt the attacked computer's passwords and sensitive data. If this worm is downloaded to a computer it then tries to decrypt the passwords from:

• Microsoft Outlook Express
• Internet cookies
• Internet Explorer password protected sites
• Internet Explorer auto complete fields
• Internet Explorer auto complete passwords
• MSN Explorer Signup
• Passwords stored in pstore.dll

The worm then is expected to pass this sensitive information to testthenewsource.net which is a malicious site as per Microsoft.

[Milton.J]

From me the way to sort out the problems caused by this worm is to Restore your Dell Inspiron Computer. The System Restore will allow you to undo all your Dell desktop computer settings to the System Restore point. Thus you need to select a restore point which was created before the infection caused by the worm.

[Snake08]

If the worm is not getting deleted by your anti virus then uninstall and install the latest release of another anti virus. Scan your computer in safe mode with the new anti virus and if this also does not solves the issue then you would have to format your computer and re-install Windows to completely remove the worm from your computer. You only need to format the Windows drive.