Overall Risk Level:
W32.Sillyban.A propagates by copying itself to unsecured mapped network drives. It may display warning messages if infected computer visited Orkut and YouTube.
Other Alias: -
Threat Level: Low
Systems Affected: Windows – All
More Info: W32.Sillyban.A on SSR
How to Remove W32.Sillyban.A:
On this page is our suggested (by precisesecurity) removal procedure and Visitor's own suggestion. We cannot control and evaluate each suggested procedure so please use it at your own risks. If no suggestion is present to remove virus, spyware, adware and malware, you may try the following:- Scan W32.Sillyban.A with MalwareByte's Anti-Malware
- Remove W32.Sillyban.A with Standard Virus Scan
12 Responses for "W32.Sillyban.A"
1. Temporarily Disable System Restore (Windows Me/XP). [how to]
2. Update the virus definitions.
3. Reboot computer in SafeMode [how to]
4. Run a full system scan and clean/delete all infected file(s)
5. Delete/Modify any values added to the registry. [how to edit registry]
Navigate to and delete the following registry entries:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer
\Run\”status” = “present”
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer
\Run\”winlogon” = “C:\heap41a\svchost.exe C:\heap41a\std.txt”
Restore the following registry entry to their original values, if required:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced
\Folder\Hidden\SHOWALL\”CheckedValue” = “0″
6. Exit registry editor and restart the computer.
7. In order to make sure that threat is completely eliminated from your computer, carry out a full scan of your computer using AntiVirus and Antispyware Software. Another way to delete the virus using various Antivirus Program without the need to install can be done with Online Virus Scanner.
Just wanna say thanks for your help. because you gave a big help solving this problem and what is more import is.
IT just take a minute to do.
THANK YOU
hi,thanks for the info and the procedures given.It helped to solve my
problem.Great job.
Thankx..
Hey… Thanks!!!
Was a bit apprehensive about trying this becase I know squat about messing with the registry n stuff, but it worked just fine!
Cheers!
man… thankx alot for this help… but i dont know how to restore the registry entry. the one with original value zero
Attu, if you cannot see that entry then I guess theres no need to execute the modification.
Thanks a lot for the detail procedure. It helped solve the problem :) Well it definately took a while for me as my USB keyboard does not work at boot time to press F8 , so used msconfig option to boot in safe mode , and my mouse did not work in safe mode so was a bit difficult operating with keyboard. But all done, and problem solved. Thanks a lot again !
Thanks a lot I was apprehensive on going into “Safe Mode” however it worked and I much appreciate your help. I only need to find out now how I got it….can’t see a reason here yet ..I’ll investigate.
RocknPop
From UK…in KSA.
I want to say thanks for your help. because you gave a big help solving this problem and what is more import is.
IT people just take a minute to do.
Thanks this helped to remove the worm from my system.
But i am still not able to connect to my printer and shared networks.
i have mapped some remote drive also. – that also gives me a Error
” The network Path not found ”
please help recover from this .
yes…this REALLY helped. was a bit apprehensive b4 but it went smoothly.
THANK YOU VERY MUCH
God bless
Thank you so much, you’re a life saver!
Any Response?