I-Worm.Kido (Removal instructions)


Removal of I-Worm.Kido:

  1. Go to Start --> Run and type regedit.
  2. Navigate to the following keys and delete them

    3. KEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\{random}\Parameters\”ServiceDll” = “Path to worm”

    HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\{random}\”ImagePath” = %SystemRoot%\system32\svchost.exe -k netsvcs

    HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Tcpip\Parameters
    “TcpNumConnections” = dword:0×00FFFFFE

  3. Now go to the following directories and unregister these dlls (click here to know how to unregister dlls).

    4. %ProgramFiles%\Internet Explorer\{Random Name}.dll

    %ProgramFiles%\Movie Maker\{Random Name}.dll

    %System%\{Random Name}.dll

    %Temp%\{Random Name}.dll

    %Documents and Settings%\All Users\Application Data \
    {Random Name}.dll

  4. Now restart your computer and you are free from the worm.
VShop
Get the best security software for your compter here!

powered by Blogger | WordPress by Newwpthemes | Converted by BloggerTheme