|
W32.Wargbot removal procedure requires technical know-how on
computer troubleshooting. It is better to consult your LAN Administrator
or Technical Persons to avoid additional damage on your computer if
modifications on Services and Registry have to be done.
MANUAL REMOVAL:
1. Temporarily disable System Restore (Windows Me/XP).
[how to]
2. Update the virus definitions.
3. Restart the computer in SafeMode
[how to]
4. Run a full system scan and delete all infected files.
5. Delete any values added to the registry.
[how to
edit registry]
Navigate to the subkey and restore the value:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Ole
Value: "enabledcom" = "n"
Navigate to the subkey and restore the values:
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Lsa
Values:
"restrictanonymous" = "1"
"restrictanonymoussam" = "1"
Navigate to the subkey and restore the values:
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services
\lanmanserver\parameters
Values:
"autoshareserver" = "0"
"autosharewks" = "0"
Navigate to and delete the subkey:
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\wgareg
6. Exit registry editor.
7. Restore the Windows Security Center.
[how to]
8. Find and stop the following services.
[how to]
DisplayName: Windows Genuine Advantage Registration Service
ImagePath: %System%\wgareg.exe
9. Reenable the SharedAccess service (Windows 2000/XP only)
[how to]
10. In order to make sure that W32.Wargbot is
completely eliminated from your computer, carry out a full scan of your
computer using
AntiVirus and
Antispyware Software. Another way to delete the virus using various
Antivirus Program without the need to install can be done with
Online Virus
Scanner.
Click here to
proceed 
Download and run any of these
Anti-Spyware: |
