Takeobel - Description  Browse by name    | misc | a | b | c | d | e | f | g | h | i | j | k | l | m | n | o | p | q | r | s | t | u | v | w | x | y | z | Description: Takeobel is a worm that copies itself to mapped network drives. It also adds an .ln3 extension to any .doc files that it finds on the compromised computer. Alias: Category: Worm Automatic Removal: Most effective removal tool is: Easy SpyRemover Manual Removal: Stop Runnin Processes: %System%\lgfxTray.exe %Windir%\System\lnks.exe Unregister DLLs: Clean Registry: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\"lgfxTray" = "%System%\lgfxTray.exe" HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\"Shell" = "Explorer.exe lnks.exe" HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer\"NoFolderOptions" = "1" HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced\"HideFileExt" = "1" HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced\"Hidden" = "2" HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced\"ShowInfoTip" = "0" Remove Files: %System%\lgfxTray.exe %Windir%\System\lnks.exe		Latest Spyware Threats     Rapid Antivirus     RealAV     PC MightyMax     Internet Antivirus Pro     Expert Antivirus 2009     Spy Guard 2008     Spyware Guard 2009     MicroAV Security Center     Sagipsul     Comodo Trust Toolbar     XP Antispyware 2009     Antivirus 2010 More...