English Deutsch Français Italiano Español Português 繁體中文 Bahasa Indonesia Tiếng Việt ภาษาไทย
All categories

The virus {worm} is W32.Stration.CX@mm. I keep getting an alert notice from my anti-virus protection service that "virus cannot be removed access to the file was denied. Would somebody let me know a good way to get rid of it and also what damage is it doing to my PC? Thanks for any help and have a great day.

2006-10-26 03:22:26 · 5 answers · asked by ♥misunderstood♥ 2 in Computers & Internet Security

5 answers

It is in with virus burst,pest trap,etc It is a nasty bad virus. Most of the time it will display a yellow triangle with a ! in the middle(a false alert) Wanting you to download there software.It is virus as well,Try this it is the only thing i have found to really deal with win32,Good luck if you need more help send me a mess on yahoo

2006-10-26 04:07:52 · answer #1 · answered by tr2thhrt 5 · 0 0

W32.Stration.CX@mm is a mass-mailing worm that attempts to download files from the Internet, which are mass-mailing components of the worm.

Fortunately, it has a low risk evaluation.

To manually remove the worm :

1. Click Start > Run.
2. Type regedit
3. Click OK.

Note: If the registry editor fails to open the threat may have modified the registry to prevent access to the registry editor. Symantec Security Response has developed a tool to resolve this problem. Download and run this tool, and then continue with the removal.

4. Navigate to the subkey:

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Session Manager

5. In the right pane, delete the value:

"PendingFileRenameOperations" = "[PATH TO THE WORM]"

6. Navigate to the subkey:

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run

7. In the right pane, delete the value:

"mqadscp3" = "system\mqadscp3.exe"

8. Navigate to the subkey:

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run

9. In the right pane, delete the value:

"serrv" = "C:\WINDOWS\serrv.exe s"

10. Navigate to the subkey:

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows

11. In the right pane, delete the value:

"AppInit_DLLs" = "e1.dll w3sskbda.dll"

12. Navigate to and delete the following registry subkey:

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\jgdwadsn

13. Exit the Registry Editor.

2006-10-26 05:18:54 · answer #2 · answered by Anonymous · 0 0

Ensure you download the latest patch for the anti-virus software you use. Then perform an on-demand-scan. if it persists send a mail to the anti-virus company

2006-10-26 03:41:14 · answer #3 · answered by Bashman 1 · 0 0

sound like you need to re do your computer and clean it out and start over if your anti virus cannot take care of this then it is in the hard drive. you need to re instill your program and start over again. it has damage your hard drive and other files you have.

2006-10-26 03:26:33 · answer #4 · answered by ? 2 · 0 1

Install NOD32 or Kaspersky... there are 30day trials on their website. They're worth buying.

2006-10-26 03:33:33 · answer #5 · answered by TravisO 4 · 0 0

fedest.com, questions and answers