How do you get rid of a 32wormblaster virus?

Answer 1

It is a Spyware Called AV-Security-2012.

Removal Instructions for AV Security 2012

Reboot your computer into Safe Mode with Networking. To do this, turn your computer off and then back on and immediately when you see anything on the screen, start tapping the F8key on your keyboard. Eventually you will be brought to a menu similar to the one below:

Using the arrow keys on your keyboard, select Safe Mode with Networking and press Enter on your keyboard.

Use the following instructions to remove AV Security 2012 (Uninstall instructions)

Registry Keys to be removed

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run ""

Infected Files to be removed.

In Windows Vista and Windows 7

%AppData%\ldr.ini

%AppData%\\

%AppData%\\

%AppData%\\

%AppData%\\AV Security 2012.ico

%Desktop%\AV Security 2012.lnk

%StartMenu%\Programs\AV Security 2012\

%StartMenu%\Programs\AV Security 2012\AV Security 2012.lnk

%System%\AV Security 2012v121.exe

C:\Windows\system32\[random].exe

%UserProfile%\Desktop\System Security 2012.lnk

%Temp%\svhostu.exe

File Location Notes:

%System% is a variable that refers to the Windows System folder. By default this is C:\Windows\System for Windows 95/98/ME, C:\Winnt\System32 for Windows NT/2000, or C:\Windows\System32 for Windows XP/Vista/7.

%Desktop% means that the file is located directly on your desktop. This is C:\DOCUMENTS AND SETTINGS\\Desktop\ for Windows 2000/XP, and C:\Users\\Desktop\ for Windows Vista and Windows 7.

%AppData% refers to the current users Application Data folder. By default, this is C:\Documents and Settings\\Application Data for Windows 2000/XP. For Windows Vista and Windows 7 it is C:\Users\\AppData\Roaming.

%StartMenu% refers to the Windows Start Menu. For Windows 95/98/ME it refers to C:\windows\start menu\, for Windows XP, Vista, NT, 2000 and 2003 it refers to C:\Documents and Settings\\Start Menu\, and for Windows Vista/7 it is C:\Users\\AppData\Roaming\Microsoft\Windows\Start Menu.

There may be one more infection assosiated with it.

. To check it's presence you have to do one thing.

In Windows XP

----------------------

Click on the start meanu and press on Run.

Inside the Run window type CMD and press on Okay.

In the black Command Window type

NETSH WINSOCK RESET and hit on enter.

If you get a message

"Sucessfully reset the Winsock Catalog.

You must restart the machine in order to complete the reset." then you are safe.

If not your computer is infected. The only solution to fix it is a Fresh Installation.

In Windows Vista and Windows 7

--------------------------------------…

Click on the Start Menu and in the Search box type CMD

At the top you can see a CMD file. Just right click on that file and select Run as

Administrator.

In the black Command Window type

NETSH WINSOCK RESET and hit on enter.

If you get a message

"Sucessfully reset the Winsock Catalog.

You must restart the machine in order to complete the reset." then you are safe.

If not your computer is infected. In windows Vista and Windows 7 a successful system restore

will fix the issue. Try a system restore to a good point.

After a successful system restore try to do the same step again.

If you got the message "Sucessfully reset the Winsock Catalog.

You must restart the machine in order to complete the reset." your computer is safe and secure.