How to Get Rid of NetWorm-i.Virus@fp

104 4

    End Processes

    • 1). Press "Ctrl" + "Alt" + "Delete" to open the Task Manager.

    • 2). Click the "Processes" tab of the Task Manager.

    • 3). Click the "Show Processes From All Users" button and then the "Image Name" heading. A complete list of processes will appear under "Image Name" in alphabetical order.

    • 4). End the following processes. To end a process, right-click the process and select "End Process" from the context menu that appears.

      CurrentFolder\smmain.exe

      CurrentFolder\spunst.exe

      ProgramFiles\Video ActiveX Access\iesmin.exe

      CurrentFolder\smunst.exe

      CurrentFolder\smmon.exe

    • 5). Close the Task Manager.

    Unregister DLLs

    • 1). Click "Start" and type "cmd" into the "Search" box and press "Enter." The Command Prompt opens.

    • 2). Type "regsvr32 /u splug.dll" (without the quotation marks) into the Command Prompt and press "Enter."

    • 3). Click "Yes" to confirm that you would like to unregister the DLL.

    • 4). Close the Command prompt.

    Delete Registry Keys

    • 1). Click "Start" and type "regedit" into the "Search" box and press "Enter." The Registry Editor opens.

    • 2). Delete each of the following registry keys. To delete a registry key, right-click the registry key and select "Delete" from the context menu that appears. Delete only the keys listed. Deleting the wrong registry key can cause serious systemwide failures.

      HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\explorer\run\"rare" = "%CurrentFolder%\smmain.exe"

      HKEY_CURRENT_USER\Software\Protection Tools\"65005″ = "1″

      HKEY_CLASSES_ROOT\CLSID\{F0993251-2512-4710-AF6E-0A13EA199D02}

      HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar\{F0993251-2512-4710-AF6E-0A13EA199D02}

      HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{F0993251-2512-4710-AF6E-0A13EA199D02}

      HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser\{F0993251-2512-4710-AF6E-0A13EA199D02}

    • 3). Close the Registry Editor.

Source...
Subscribe to our newsletter
Sign up here to get the latest news, updates and special offers delivered directly to your inbox.
You can unsubscribe at any time

Leave A Reply

Your email address will not be published.