SpywareRemovalBlog.com » Worm

System Tools Worm

admin — Tue, 17 Nov 2009 17:09:54 +0000

A worm generally spreads without user action and distributes complete copies (possibly modified) of itself across networks. A worm can consume memory or network bandwidth, which can cause a computer to crash.

Symptoms of this Malware

Displays fake warning messages and “Safety Center Alert ” popups alerts.

Flashing icons appear on your system tray (Near of your system clock).

Hijacked homepage to unknown webpage.

These symptoms are related to malware infection, which is distributed via the Internet through adult websites or fake Active-X objects.

Download Removal Utility For - System Tools Worm

Other Removal Source, Check Below Links

KoobFaceWorm

admin — Fri, 16 Oct 2009 20:28:22 +0000

KoobFaceWorm is a worm. A worm generally spreads without user action and distributes complete copies (possibly modified) of itself across networks. A worm can consume memory or network bandwidth, which can cause a computer to crash.

Aliases : Worm.KoobFace, W32/Koobface.worm
Infection Type : Worm
Risk Level : Dangerous
System Affected : Windows Operating System

Download Removal Utility for KoobFaceWorm

Manual Removal of KoobFaceWorm

Kill Spyware Processes ( Help )
freddy74.exe, freddy75.exe, ld15.exe, mstre22.exe, mstre23.exe, mstre24.exe

Get rid of Files and Folder ( Help )
C:\WINDOWS\System32\Drivers\fio32.sys
C:\WINDOWS\System32\fio32.dll
C:\WINDOWS\System32\mon32.dll

C:\WINDOWS\tag14.exe
C:\WINDOWS\pp10.exe
C:\WINDOWS\pp11.exe
C:\WINDOWS\pp12.exe

C:\WINDOWS\ld10.exe
C:\WINDOWS\ld11.exe
C:\WINDOWS\ld12.exe
C:\WINDOWS\ld15.exe

C:\WINDOWS\mstre21.exe
C:\WINDOWS\mstre22.exe
C:\WINDOWS\mstre23.exe
C:\WINDOWS\mstre24.exe

C:\WINDOWS\freddy67.exe
C:\WINDOWS\freddy68.exe
C:\WINDOWS\freddy69.exe
C:\WINDOWS\freddy70.exe
C:\WINDOWS\freddy71.exe
C:\WINDOWS\freddy72.exe
C:\WINDOWS\freddy73.exe
C:\WINDOWS\freddy74.exe
C:\WINDOWS\freddy75.exe

Delete following folders ( Help )
C:\WINDOWS\fdgg34353edfgdfdf

Delete Registry Values ( Help )
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\fio32
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\fioo32
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Enum\Root\LEGACY_FIO32
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Enum\Root\LEGACY_FIOO32

Download Removal Utility for KoobFaceWorm

W32.SillyFDC.BCX

admin — Tue, 29 Sep 2009 20:32:07 +0000

W32.SillyFDC.BCX is a worm. A worm generally spreads without user action and distributes complete copies (possibly modified) of itself across networks. A worm can consume memory or network bandwidth, which can cause a computer to crash.

Aliases : —
Infection Type : Worm
Risk Level : Dangerous
System Affected : Windows Operating System

Download Removal Utility for W32.SillyFDC.BCX

Manual Removal of W32.SillyFDC.BCX

Kill Spyware Processes ( Help )
— No traces available —

Get rid of Files and Folder ( Help )
— No traces available —

Delete following folders ( Help )
— No traces available —

Delete Registry Values ( Help )
— No traces available —

Download Removal Utility for W32.SillyFDC.BCX

W32.Perz

admin — Thu, 24 Sep 2009 02:19:52 +0000

W32.Perz is a worm. A worm generally spreads without user action and distributes complete copies (possibly modified) of itself across networks. A worm can consume memory or network bandwidth, which can cause a computer to crash.

Aliases : —
Infection Type : Worm
Risk Level : Dangerous
System Affected : Windows Operating System

Download Removal Utility for W32.Perz

Manual Removal of W32.Perz

Kill Spyware Processes ( Help )
— No traces available —

Get rid of Files and Folder ( Help )
— No traces available —

Delete following folders ( Help )
— No traces available —

Delete Registry Values ( Help )
— No traces available —

Download Removal Utility for W32.Perz

W32.Korron.B

admin — Sun, 31 May 2009 21:37:55 +0000

W32.Korron.B is a worm. A worm generally spreads without user action and distributes complete copies (possibly modified) of itself across networks. A worm can consume memory or network bandwidth, which can cause a computer to crash.

Aliases : —
Infection Type : Worm
Risk Level : Dangerous
System Affected : Windows Operating System

Download Removal Utility for W32.Korron.B

Manual Removal of W32.Korron.B

Kill Spyware Processes ( Help )
Renungan Illahi.txt.exe, Hayalan.exe, 49U5T1N4.exe

Get rid of Files and Folder ( Help )
%UserProfile%\Local Settings\Application Data\WINDOWS\CSRSS.EXE
%UserProfile%\Local Settings\Application Data\WINDOWS\LSASS.EXE
%UserProfile%\Local Settings\Application Data\WINDOWS\SERVICES.EXE
%UserProfile%\Local Settings\Application Data\WINDOWS\SMSS.EXE
%UserProfile%\Local Settings\Application Data\WINDOWS\WINLOGON.EXE
%System%\Coollman.scr
%System%\Driver\Printer\LX300\Ac.ico
%System%\Driver\Printer\LX300\akses.ico
%System%\Driver\Printer\LX300\com.ico
%System%\Driver\Printer\LX300\CPL.ico
%System%\Driver\Printer\LX300\doc.ico
%System%\Driver\Printer\LX300\film.ico
%System%\Driver\Printer\LX300\Folder.ico
%System%\Driver\Printer\LX300\IE.ico
%System%\Driver\Printer\LX300\jpg.ico
%System%\Driver\Printer\LX300\panel.ico
%System%\Driver\Printer\LX300\pdf.ico
%System%\Driver\Printer\LX300\pps.ico
%System%\Driver\Printer\LX300\ppt.ico
%System%\Driver\Printer\LX300\setup.ico
%System%\Driver\Printer\LX300\setup2.ico
%System%\Driver\Printer\LX300\txt.ico
%System%\Driver\Printer\LX300\winamp.ico
%System%\Driver\Printer\LX300\winrar.ico
%System%\Driver\Printer\LX300\winzip.ico
%System%\Driver\Printer\LX300\xls.ico
%System%\shell.exe
%System%\userinit.exe,
%SystemDrive%\49U5T1N4.exe
%SystemDrive%\Renungan Illahi.txt
%SystemDrive%\Renungan Illahi.txt.exe
%SystemDrive%\Documents and Settings\All Users\Start Menu\Programs\Startup\Microsoft Office.pif
%SystemDrive%\Documents and Settings\All Users\Start Menu\Programs\Startup\Hayalan.exe
%SystemDrive%\Perenungan Illahi.txt

Delete following folders ( Help )
— No traces available —

Delete Registry Values ( Help )
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\”LogonAdministrator” = “C:\Documents and Settings\Administrator\Local Settings\Application Data\WINDOWS\CSRSS.EXE”
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\”System Monitoring” = “C:\Documents and Settings\Administrator\Local Settings\Application Data\WINDOWS\LSASS.EXE”
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run\49U5T1N4″ = “C:\WINDOWS\49U5T1N4.exe”
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run\MSMSGS” = “C:\Documents and Settings\Administrator\Local Settings\Application Data\WINDOWS\WINLOGON.EXE”
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run\ServiceAdministrator” = “C:\Documents and Settings\Administrator\Local Settings\Application Data\WINDOWS\SERVICES.EXE”

Download Removal Utility for W32.Korron.B

W32.SillyFDC.BBS

admin — Sat, 16 May 2009 17:17:24 +0000

W32.SillyFDC.BBS is a worm. A worm generally spreads without user action and distributes complete copies (possibly modified) of itself across networks. A worm can consume memory or network bandwidth, which can cause a computer to crash.

Aliases : —
Infection Type : Worm
Risk Level : Dangerous
System Affected : Windows Operating System

Download Removal Utility for W32.SillyFDC.BBS

Manual Removal of W32.SillyFDC.BBS

Kill Spyware Processes ( Help )
avgvema.exe

Get rid of Files and Folder ( Help )
%System%\avgvema.exe

Delete following folders ( Help )
— No traces available —

Delete Registry Values ( Help )
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\ctfmon.exe\”Debugger” = “avgvema.exe”
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\”ctfmon.exe” = “ctfmon.exe”

Download Removal Utility for W32.SillyFDC.BBS

Related Files

avgvema.exe

W32.SillyFDC.BBR

admin — Sat, 16 May 2009 16:56:44 +0000

W32.SillyFDC.BBR is a worm. A worm generally spreads without user action and distributes complete copies (possibly modified) of itself across networks. A worm can consume memory or network bandwidth, which can cause a computer to crash.

Aliases : —
Infection Type : Worm
Risk Level : Dangerous
System Affected : Windows Operating System

Download Removal Utility for W32.SillyFDC.BBR

Manual Removal of W32.SillyFDC.BBR

Kill Spyware Processes ( Help )
autorun.exe

Get rid of Files and Folder ( Help )
C:\autorun.inf
C:\autorun.exe
%ProgramFiles%\Microsoft Common\svchost.exe

Delete following folders ( Help )
— No traces available —

Delete Registry Values ( Help )
HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings\”ProxyEnable” = “0″
HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Connections\”DefaultConnectionSettings” = “[BINARY DATA]”
HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Connections\”SavedLegacySettings” = “[BINARY DATA]”

Download Removal Utility for W32.SillyFDC.BBR

Related Files

autorun.exe

W32.Mocon

admin — Sat, 16 May 2009 16:46:32 +0000

W32.Mocon is a worm. A worm generally spreads without user action and distributes complete copies (possibly modified) of itself across networks. A worm can consume memory or network bandwidth, which can cause a computer to crash.

Aliases : —
Infection Type : Worm
Risk Level : Dangerous
System Affected : Windows Operating System

Download Removal Utility for W32.Mocon

Manual Removal of W32.Mocon

Kill Spyware Processes ( Help )
cssrs.exe

Get rid of Files and Folder ( Help )
C:\autorun.inf
C:\cssrs.exe

Delete following folders ( Help )
— No traces available —

Delete Registry Values ( Help )
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run\”Verificador do sistema” = “c:\cssrs.exe

Download Removal Utility for W32.Mocon

Related Files

cssrs.exe

W32.Relnek.A

admin — Thu, 30 Apr 2009 13:27:30 +0000

W32.Relnek.A is a worm. A worm generally spreads without user action and distributes complete copies (possibly modified) of itself across networks. A worm can consume memory or network bandwidth, which can cause a computer to crash.

Aliases : —
Infection Type : Worm
Risk Level : High Risk
System Affected : Windows Operating System

Download Removal Utility for W32.Relnek.A

Manual Removal of W32.Relnek.A

Kill Spyware Processes ( Help )
Blah.exe

Get rid of Files and Folder ( Help )
C:\Blah.exe

Delete following folders ( Help )
— No traces available —

Delete Registry Values ( Help )
— No traces available —

Download Removal Utility for W32.Relnek.A

Related Files

Blah.exe

W32.SillyFDC.BBO

admin — Thu, 30 Apr 2009 13:16:58 +0000

W32.SillyFDC.BBO is a worm. A worm generally spreads without user action and distributes complete copies (possibly modified) of itself across networks. A worm can consume memory or network bandwidth, which can cause a computer to crash.

Aliases : W32.SillyFDC.BBO
Infection Type : Worm
Risk Level : High Risk
System Affected : Windows Operating System

Download Removal Utility for W32.SillyFDC.BBO

Manual Removal of W32.SillyFDC.BBO

Kill Spyware Processes ( Help )
mmsvc32.exe

Get rid of Files and Folder ( Help )
%System%\mmsvc32.exe
C:\autorun.exe
C:\autorun.inf

Delete following folders ( Help )
— No traces available —

Delete Registry Values ( Help )
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\”Microsoft Network Services Controller” = “%System%\mmsvc32.exe”

Download Removal Utility for W32.SillyFDC.BBO

Related Files

mmsvc32.exe