Follow the steps to get rid of W32.Mixor.Q from your computer:
- Click Start > Run.
- Type regedit
- Click OK.
- Note: If the registry editor fails to open the threat may have modified the registry to prevent access to the registry editor. Security Response has developed a tool to resolve this problem. Download and run this tool, and then continue with the removal.
- Navigate to the subkey:HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\RunHKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run
- In the right pane, delete the value:"agent" = "%System%\ppl.exe"or"agent" = "%System%\alsys.exe"
- Navigate to the subkey:HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run
- In the right pane, delete the values:"taskdir"="%System%\taskdir.exe""adir"="%System%\adirss.exe"
- Navigate to the subkey:HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess
- In the right pane, restore the following entry to its previous value, if required:"Start" = "4"
- Exit the Registry Editor.
0 comments:
Post a Comment