Virus Threats and Removal Tools

W32.Sygyp.A@mm removal procedures requires technical know-how on  computer troubleshooting. It is better to consult your LAN Administrator or Technical Persons to avoid additional damage on your computer if modifications on Services and Registry have to be done.

MANUAL REMOVAL:

1. Disable System Restore (Windows Me/XP). [how to]
 

2. Search and remove all the entries that the risk added to the hosts file.

%System%\Regverif32.exe
%Windir%\GoogleEarthSetup.exe

Note:
%System% is a variable that refers to the System folder. By default this is C:\Windows\System (Windows 95/98/Me), C:\Winnt\System32 (Windows NT/2000), or C:\Windows\System32 (Windows XP).
%Windir% is a variable that refers to the Windows installation folder. By default, this is C:\Windows (Windows 95/98/Me/XP) or C:\Winnt (Windows NT/2000).

3. Update the virus definitions.
 

4. Run a full system scan and delete all the files detected.
 

5. Delete any values added to the registry. [how to edit registry]

Navigate to the subkey and delete value:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run
Value: "RegVfy32" = "%System%\Regverif32.exe"

Navigate to and delete the subkey:
HKEY_LOCAL_MACHINE\SOFTWARE\Gypsy\W32.Gypsy

Navigate to the subkey and reset value if applicable:
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\System
Value: "DisableTaskmgr" = "1"

Navigate to the subkey and reset values if applicable:
HKEY_CURRENT_USER\Identities\[DEFAULT USER]\Software\Microsoft\Outlook Express\[OUTLOOK VERSION]\Dont Show Dialogs
Values:
"Compact Do not Ask Again" = "1"
"Delete Thread Warning" = "6"
"Mail Empty Subject Warning" = "1"
"Send Mail Warning" = "1"

Navigate to the subkey and reset values if applicable:
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\LSA
Values:
"limitblankpassworduse" = "0"
"forceguest" = "0"
"crashonauditfail" = "0"

6. Exit registry and re-start the computer

***If it makes changes to Windows registry that may prevent you from running executable files. A tool to reset registry values to the default value is available for download. Click Here.

7. Restore the Windows Security Center. [how to]
 

8. Reenable the SharedAccess service (Windows 2000/XP only). [how to]

9. In order to make sure that worm sygyp.a@mm is completely eliminated from your computer, carry out a full scan of your computer using AntiVirus and Antispyware Software. Another way to delete the virus using various Antivirus Program without the need to install can be done with Online Virus Scanner.

  FREE ON-LINE VIRUS SCANNER

Click here to proceed

  DOWNLOAD REGISTRY RESET TOOLS

Click here to download