Email-Worm.Win32.Zhelatin.a removal - Email-Worm.Win32.Zhelatin.a virus cleaner
Posted on May 14th, 2009 in Virus removal
Email-Worm.Win32.Zhelatin.a removal - Email-Worm.Win32.Zhelatin.a virus cleaner:
1. Temporarily Disable System Restore, Reboot computer in SafeMode;
2.Find and delete the following files in the folder:
%System%\alsys.exe
%System%\wincom32.ini
%System%\wincom32.sys
%System%\wincom32.sys
3. Delete or modify the following registry keys and values:
[HKLM\Software\Microsoft\Windows\CurrentVersion\Run]
“Agent” = “%System%\alsys.exe…”[HKCU\Software\Microsoft\Windows\CurrentVersion\Run]
“Agent” = “%System%\alsys.exe…”
“Agent” = “%System%\alsys.exe…”[HKCU\Software\Microsoft\Windows\CurrentVersion\Run]
“Agent” = “%System%\alsys.exe…”
[HKLM\System\CurrentControlSet\Services\SharedAccess]
[HKLM\System\ControlSet001\Services\SharedAccess]
“Start” = “4″
4. Scan your computer completely using antivirus software(AVG,Malwarebytes,CCleaner,etc.).
