Search:  In

 W32.Patahme@mm - Description


 Browse by name

 
 | misc | a | b | c | d | e | f | g | h | i | j | k | l | m | n | o | p | q | r | s | t | u | v | w | x | y | z |

Description:
W32.Patahme@mm is a worm that spreads by copying itself to network shares, various local folders and removable drives. It also sends spam emails with a copy of itself as an attachment.


Alias:

Category:
Worm

Automatic Removal: Most effective removal tool is: Easy SpyRemover

Manual Removal:



Stop Runnin Processes:
meme.bmp
sysexplorer.exe
sysprint.exe
wininit.exe
patahhati.exe
memesayang.exe


Unregister DLLs:



Clean Registry:
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run\"sysshell" = "%Windir%\sysexplorer.exe"
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run\"sysprint" = "%Windir%\sysprint.exe"
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\Folder\Hidden\SHOWALL\"Chec
kedValue" = "1"
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\Folder\Hidden\SHOWALL\"DefaultValue" = "1"
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\Folder\Hidden\NOHIDDEN\"CheckedValue" = "2"
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\Folder\Hidden\NOHIDDEN\"DefaultValue" = "2"
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced\"Hidden" = "1"
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced\"HideFileExt" = "1"
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\System\"DisableRegistryTools" = "1"
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\System\"DisableTaskMgr" = "1"
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\"NoFolderOptions" = "1"


Remove Files:
meme.bmp
sysexplorer.exe
sysprint.exe
wininit.exe
patahhati.exe
memesayang.exe
putuscinta.htm
memesayang.htm
happyday.htm
   


Latest Spyware Threats
    Comodo Trust Toolbar
    XP Antispyware 2009
    Antivirus 2010
    Freview
    RegistryGreat
    XPAntivirus
    Windows Antivirus 2008
    IE AntiVirus
    SpywareQuake 4
    Antivirus XP
    SecurePCCleaner
    Trojan.FakeAlert



Copyright © PcRepairCentral, 2005.