Takeobel - Description  Browse by name    | misc | a | b | c | d | e | f | g | h | i | j | k | l | m | n | o | p | q | r | s | t | u | v | w | x | y | z | Description: Takeobel is a worm that copies itself to mapped network drives. It also adds an .ln3 extension to any .doc files that it finds on the compromised computer. Alias: Category: Worm Automatic Removal: Most effective removal tool is: Easy SpyRemover Manual Removal: Stop Runnin Processes: %System%\lgfxTray.exe %Windir%\System\lnks.exe Unregister DLLs: Clean Registry: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\"lgfxTray" = "%System%\lgfxTray.exe" HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\"Shell" = "Explorer.exe lnks.exe" HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer\"NoFolderOptions" = "1" HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced\"HideFileExt" = "1" HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced\"Hidden" = "2" HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced\"ShowInfoTip" = "0" Remove Files: %System%\lgfxTray.exe %Windir%\System\lnks.exe		Latest Spyware Threats     RegistryGreat     XPAntivirus     Windows Antivirus 2008     IE AntiVirus     SpywareQuake 4     Antivirus XP     SecurePCCleaner     Trojan.FakeAlert     SpamBlockerUtility     AntispywareBot     AntiSpywareExpert     DoctorAdwarePro More...