Prozac Online Buy Antabuse Cipro Online Buy Cymbalta Toprol XL Online Buy Cipro Elimite Online Buy Neurontin Nexium Online Buy Seroquel

W32.Nekat.A is a worm that multiplies itself by infecting removable storage devices. This parasite is notorious for decreasing security settings thus creating a clear passage for additional malware applications to infiltrate your machine. It can also create registry entries that result in disablement of many functions in the Control Panel, Task Manager, Windows Registry Editor and the command shell.

Automated Detection for W32.Nekat.A

W32.Nekat.A Manual Removal Instructions

Remove W32.Nekat.A registry values:

HKEY_CURRENT_USER\\Control Panel\\don�ft load\\�htimedate.cpl�h = �gNo�h
HKEY_CURRENT_USER\\Control Panel\\don�ft load\\�hnusrmgr.cpl�h = �gNo�h
HKEY_CURRENT_USER\\Control Panel\\don�ft load\\�hnetcpl.cpl�h = �gNo�h
HKEY_CURRENT_USER\\Control Panel\\don�ft load\\�hncpa.cpl�h = �gNo�h
HKEY_CURRENT_USER\\Control Panel\\don�ft load\\�hmain.cpl�h = �gNo�h
HKEY_CURRENT_USER\\Control Panel\\don�ft load\\�hjoy.cpl�h = �gNo�h
HKEY_CURRENT_USER\\Control Panel\\don�ft load\\�hintl.cpl�h = �gNo�h
HKEY_CURRENT_USER\\Control Panel\\don�ft load\\�hinetcpl.cpl�h = �gNo�h
HKEY_CURRENT_USER\\Control Panel\\don�ft load\\�hhdwwiz.cpl�h = �gNo�h
HKEY_CURRENT_USER\\Control Panel\\don�ft load\\�happwiz.cpl�h = �gNo�h
HKEY_CURRENT_USER\\Control Panel\\don�ft load\\�haccess.cpl�h = �gNo�h
\\SysTray.com�h = �g%WINDIR%\\SysTray.com:*:Enabled:SysTray�h
\\FirewallPolicy\\StandardProfile\\AuthorizedApplications\\List\\�h%Windir%
HKEY_LOCAL_MACHINE\\System\\ControlSet001\\Services\\SharedAccess\\Parameters
\\�hShell�h = �g%Windir%\\SysTray.com�h
HKEY_LOCAL_MACHINE\\Software\\Microsoft\\Windows\\CurrentVersion\\Run
\\�hTest_Amor�h = �gCSCFlags=0��
HKEY_LOCAL_MACHINE\\System\\ControlSet001\\Services\\lanmanserver\\Shares
HKEY_LOCAL_MACHINE\\Software\\XCryptOR\\W32Roty.A\\�hAka4�� = �gtest.com�h
HKEY_LOCAL_MACHINE\\Software\\XCryptOR\\W32Roty.A\\�hAka2�� = �gscvhost.exe�h
HKEY_LOCAL_MACHINE\\Software\\XCryptOR\\W32Roty.A\\�hAka1�� = �gSysTray.com�h

Important Disclaimer

What is a Worm?

W32.Nekat.A is a Worm.

A worm is a type of virus that replicates by resending itself as an e-mail attachment or as part of a network message. Unlike a regular computer virus, a worm is self-contained and does not need to be part of another program to duplicate itself. A worm hides in active memory and performs malicious acts, such as using parts of the computer’s system resources. Worms are usually invisible to the user and are designed to affect the computer’s performance. A worm take control of remote systems without any help from the users and can delete files, send documents via email, or encrypt files.

W32.Nekat.A is related to:

  » No related posts

This entry was posted on Monday, January 28th, 2008 at 12:03 pm and is filed under Worms. You can follow any responses to this entry through the RSS 2.0 feed. You can leave a response, or trackback from your own site.