Remove Worm.Spybot win32 malware

Remove Worm.Spybot win32 malware

SpyBot is a very dangerous worm. It uses many ways to provide a hacker with remote access of an infected computer.

Once SpyBot gets on a machine, it rings an IRC server and waits for instructions from an attacker. The later can execute commands then and gain control of the compromised system. SpyBot (a.k.a. W32.Spybot.Worm) infection results adware pop-ups, joining botnets, identity theft and loss of other sensitive data.

The worst thing about W32.Spybot.Worm is its ability to hide its presence; people may not notice SpyBot aboard a computer unless reputable anti-spyware scan is used. SpyBot spreads via mIRC, Kazaa p2p download manager and free downloads on the Internet.

Do not take SpyBot as Spybot Search and Destroy. Spybot Search and Destroy is anti-spyware and it is not a threat to your computer; but SpyBot worm is a very dangerous infection and it should be deleted as soon as possible.


SpyBot is Dangerous

SpyBot is a malicious Worm parasite
SpyBot may install other spyware parasites
SpyBot will replicate and email itself to contacts in your address book.
SpyBot may come bundled with or spread other spyware
SpyBot may prove difficult or impossible to remove
SpyBot violates your privacy and compromises your security

To Remove this worm manually:

Stop these SpyBot processes:
mainwin32.exe
Bling.exe
Netwmon.exe
Wuamgrd.exe

Remove these SpyBot Registry Entries:
HKEY_CURRENT_USER\SOFTWARE\KAZAA\LocalContent “dir0″ = “012345:[CONFIGURABLE PATH]”

Remove these SpyBot files:
mainwin32.exe
Bling.exe
Netwmon.exe
Wuamgrd.exe