RSS

Here's How To Clean The Worm Tidserve W32

Worm Tidserve or W32.Tidserve mainly spread via removable drives. This Worm does not cause serious damage to your system, but you should delete it immediately. This Worm can disable your antivirus software, which makes your computer vulnerable to virus infection is dangerous. This Worm can also change the settings of your browser, and prevent You from accessing websites that relate to security.
Here's how to clean the Worm Tidserve or W32;

Remove Registry Entries

1 #. Click "Start." Type "regedit" in the search box and press "Enter." Allow the Registry Editor tool to launch.

Navigate to the following registry entries on the left pane one at a time:
HKEY_CLASSES_ROOTmsqpdxvx "msqpdxpos" = "[RANDOM STRING VALUE]"
HKEY_CLASSES_ROOTmsqpdxvx "msqpdxsrv" = "[RANDOM DWORD VALUE]"
HKEY_CLASSES_ROOTmsqpdxvx "msqpdxid" = "[RANDOM STRING VALUE]"
HKEY_CLASSES_ROOTmsqpdxvx "msqpdxinfo" = "[RANDOM STRING VALUE]"
HKEY_CLASSES_ROOTmsqpdxvx "msqpdxaff" = "[RANDOM DWORD VALUE]"
HKEY_CLASSES_ROOTmsqpdxvx "msqpdxpff" = "[RANDOM DWORD VALUE]"
HKEY_CLASSES_ROOThomeviewCLSID "default" = "{6BF52A52-394A-11D3-B153-00C04F79FAA6}"
HKEY_LOCAL_MACHINESystemCurrentControlSetServicesmsqpdxserv config.sys

2 #. Right-click the entries at the end of the registry path and click "Delete." Exit the Registry Editor.

Unregister the Files

Click "Start."Type "cmd" in the search box and press "Enter." Wait for the Command Prompt to appear.Type "regsvr32/u etc. etc." at the Command Prompt and press "Enter." This will unregister the Tidserv files.Exit the Command Prompt.

Remove the Files

Click "Start."Type "Windows Explorer" in the search box and press "Enter." Allow the Windows Explorer to open.Type "etc. etc. [RANDOM CHARACTERS]; tmp" in the search box and press "Enter."Right-click the file and click "Delete."

NOTE;

Backup the registry first before doing any changes. Do not make any step other than those ordered in the Registry Editor. You can harm your system by making small changes to the registry You are violating the above rules.


  • Digg
  • Del.icio.us
  • StumbleUpon
  • Reddit
  • RSS

0 comments:

Post a Comment