Friday, January 5, 2007

How to get rid of the W32.Mixor.Q infection on a computer?

Follow the steps to get rid of W32.Mixor.Q from your computer:

  1. Click Start > Run.
  2. Type regedit
  3. Click OK.
  4. Note: If the registry editor fails to open the threat may have modified the registry to prevent access to the registry editor. Security Response has developed a tool to resolve this problem. Download and run this tool, and then continue with the removal.
  5. Navigate to the subkey:HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\RunHKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run
  6. In the right pane, delete the value:"agent" = "%System%\ppl.exe"or"agent" = "%System%\alsys.exe"
  7. Navigate to the subkey:HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run
  8. In the right pane, delete the values:"taskdir"="%System%\taskdir.exe""adir"="%System%\adirss.exe"
  9. Navigate to the subkey:HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess
  10. In the right pane, restore the following entry to its previous value, if required:"Start" = "4"
  11. Exit the Registry Editor.

0 comments: