Best Free Microsoft Updates and Microsoft Repair and Windows Updates

What is Amirecivel as well as dismissal instructions

Amirecivel, additionally well known as Amircivil, is a worm which spreads by record pity networks regulating a Kazaa peer-to-peer client. Once executed, a bug installs itself to a system, creates mixed copies of itself, as well as shares putrescent files with users of record pity networks. Amirecivel hides windows of using security-related programs as well as alternative commissioned software. It can additionally restart a compromised computer. The worm runs upon each Windows startup.

Amirecivel primer removal:
Kill processes:
civil.exe, project2.exe, svchot.exe
Delete registry values:
HKEY_CURRENT_USERSoftwareMicrosoftWindowsCurrentVersionRunamircivil
HKEY_CURRENT_USERSoftwareMicrosoftWindowsCurrentVersionamir_civil
Delete files:
civil.exe, project2.exe, svchot.exe, iran.pic.pif, 002.pic.pif, winx32.pif, anti_virus(norton).doc.cmd, amir_civil.cmd, kaza.cmd, amir_civil.scr, amir_civil3.scr, cool.pic.scr, iran.scr, iran_02.scr, iraq.pic.scr, screen_saver.scr, screen_saver2.scr
Misc:
Exact record location:
amir_civil.cmd – D: as well as G:
iran.scr, iran_02.scr – F:
anti_virus(norton).doc.cmd – G:
screen_saver.scr, screen_saver2.scr – D:
iran.pic.pif – D:Program FilesKazaaMy Shared Folder
svchot.exe – C:WindowsSystem, C:WindowsSystem32 or C:WinntSystem32
002.pic.pif, winx32.pif, amir_civil.scr, amir_civil3.scr, cool.pic.scr – E:
civil.exe, kaza.cmd, iraq.pic.scr – C:Program FilesKazaaMy Shared Folder

Article Source: レジストリクリーナー