Worm.Autoit

Worm.Autoit is a very obnoxious infection which is not easily detected by security tools. It complexity and ability to hide its presence implies that the user should remove it with a powerful and up-dated antispyware application, because the worm spreads tons of dormant and savage files, and creates many processes, which have to be deleted and stopped, respectively.

Because of notorious components of Worm.Autoit, the user and his or her data held on the computer faces serious risk. Judging from the threat’s components, the worm can download more malware to the system, record keystrokes and steal, for example, your login usernames and passwords. Files that are alleged to be responsible for this illegal activity are ssvichosst.exe, which may get into the system through the Yahoo services, SuSoft.exe and weather.exe. The later is an application showing weather forecasts; however, it may be used to pop up advertisements. Additionally, if you are infected with Worm.Autoit, your internet browser may have a browser help object (BHO), which, if not installed as an add-on by yourself, may be installed by the infection.

The infection also uses well-known names of software including VistaDrive.exe, explorer.exe and mirc.exe to camouflage itself. For example, if you find that the location of explorer.exe is not in the folder “Window”, then you should get suspicious about the reason for its presence in a different location. Additionally, mirc.exe, which is a chat program allowing users to communicate online, starts operating when the machine is booted up and can display pop-ups, errors and warnings.

Consequently, install a reliable spyware removal tool to remove Worm.Autoit. The antispyware will fix the registry, terminate different processes related to the infection and remove tons of files, some of which, when being deleted manually, could be accidentally skipped. For example, you may miss such randomly named files as 90255456.exe, 10245464.exe, cnihewjv.dll and many others, which, if not deleted, may still do damage to the system. Hence, acquire a powerful application to completely remove Worm.Autoit.

Download Spyware Removal Tool to Remove* Worm.Autoit

Quick & tested solution for Worm.Autoit removal.
100% Free Scan for Windows

How to manually remove Worm.Autoit

Files associated with Worm.Autoit infection:

psvrr.exe
zchMiB.exe
regsvr.exe
ClamAVFile
Starter.dll
install_incredimail.exe
configuration.exe
termew32.dll
WNG.exe
dnscfo32.dll
svcodecs.exe
STC3.exe
ju7bd.exe
aadrive32.exe
Recycle.Bin.exe
Marvell Lan Driver2.exe
hnukg.sys
9e95a1d4-f6d0-403a-a5a3-bdd9ae1a700c_33.avi
843g4.com
Perx.exe
mdhcp32.dll
avupdate.exe
6to4ex.dll
RVHOST.exe
KILLDISK_WIN.EXE
iufgotis.exe
ConSvc.exe
csrcs.exe
mgy.exe
_SystemUpdate.exe
svrchost.exe
SSVICHOSST.exe
abest.exe
PreInstaller[1].exe
16723754.exe
96733746.exe
16692344.exe
atom exit.exe
lphcvb7j0epbg.exe
pofokago.dll
efcdEuSj.dll
run.exe
KB123386.EXE
14945624.exe
94955616.exe
JavaCore.exe
ykiijcvp.dll
MDdccb.exe
17722954.exe
wvore.exe
ssqrSJYp.dll
lmkwovkh.dll
bndmss.exe
f9ssyypbuw.exe
92EF59.EXE
AMC.exe
SuSoft.exe
92410306.exe
12400314.exe
90255456.exe
10245464.exe
hdwf.exe
tag12.exe
msupdt.exe
MD3d6b.exe
__c006C428.dat
_A00F481DE.exe
woyawizi.dll
hemodizi.dll
tikiyabu.dll
bepesata.dll
hgGwTnmk.dll
nukatojo.dll
vwva.exe
oell.exe
qgipz2469937.exe
r56ujxftyrsdjsxrgf46i5sgheh44.exe
winpad32.exe
bios.exe
nvsvc32.exe
X_Spruce.exe
Contraviro.exe
ContraviroInstall[1].exe
hjengine.dll
14147964.exe
94157956.exe
9F87A3.EXE
fisalunu.dll
ld10.exe
ant_sr.dll
rru.exe
sysstem.exe
WebExcellenceAdviceTool.dll
~f9bd.tmp
drwt32.exe
sever.exe
paasypcqyvxhpdcx.dll
ybyxmtotthl.dll
17304414.exe
liser.exe
liser.dll
SurferClient.exe
msbcs.exe
iissrv.exe
ipuvoqububukuk.dll
opnnOiHW.dll
fevr.exe
bpitvjbkuryoe.dll
winsysrv.exe
{9ad1e5fc-2f85-c796-01a0-74aec6c37325}.dll
mc.exe dm=http://nocompromaat.com; ad=http://nocompromaat.com
killer_rodog.exe
vir-remover-pro[1].exe
virusremover.exe
vowtjs.exe
gghsehlusgqposyug.dll
784953.dll
uqawntfe.dll
iwvxlagu.dll
oondmaad.dll
oetfjink.dll
ocrbqpgd.dll
nxiucxfb.dll
cnihewjv.dll
leisytrf.dll
ffjetkxh.dll
lgjpursr.dll
mtoblvar.dll
47.tmp.exe
zeagaa.exe
vtUlMgGy.dll
psystem[1].exe
Trjscan.exe
ActiveScanz.exe
SiteAccess.dll
16140934.exe
18355614.exe
98365606.exe
93325616.exe
67ACF2.EXE
99926866.exe
19916874.exe
93789346.exe
13779354.exe
10639534.exe
90649526.exe
90598116.exe
10588124.exe
windupdates.exe
hiyusago.dll
__c0056ABA.dat
_A00F6A9D154.exe
aeemdnvp.dll
undubxnr.dll
pljybgiy.dll
fmmhvcat.dll
oesbbe.dll
WToolsA.exe
wupdt.exe
systb.dll
dsound3dd.dll
exp.exe
pascw.exe
SpywareBot.exe
~3.dll
protector.exe
~1.exe
wprcaw.exe
19353904.exe
99363896.exe
91457186.exe
11447194.exe
18058594.exe
winzz.exe
hjktvx.exe
Hyden.dll.exe
fsoaylml.sys
BILL~1.LII
nl.exe
ree1.exe
ree2.exe
gsf83iujid.dll
14973654.exe
94983646.exe
antit.dll
romeo15.exe
bittorrent.exe
nodlogin.exe
BDGuard.SYS
__c0084013.dat
crypt3232.dll
AntiSpyware Pro.exe
isadisk.sys
ld09.exe
18563124.exe
96856706.exe
16846714.exe
99388276.exe
19378284.exe
afuya1119762.exe
RemoveWGA.exe
init.exe
lwinqldi.exe
PersonalWebIE_v1406.dll
cbXPJCSk.dll
lesaluhu.dll
feyiloto.dll
wtvmyakx.dll
hpmtoxvq.dll
nwarox.dll
ntomjwid.dll
Smart Antivirus-2009.exe
PAVRM.exe
SetupAdvancedVirusRemover[1].exe
defender32.exe
CcEvtSvc.exe
444.0
aziganoweturetoz.dll
freddy46.exe
SYSDLL.exe
websrvx.exe
hrzhhmpqli.dll
depirmny.exe
dllhost.exe
bixstmhn.dll
_A00FEBA65A.exe
xaavpocv.dll
kkzcbb.dll
nybioc.dll
iqlmviwc.dll
ihost.exe
14865934.exe
94875926.exe
BIJBEL~1.DLL
dgtxrdfxlw.dll
1204556042.dll
dmdvpnqfv.dll
dgtxrdfwrv.dll
dgtxrdfnfq.dll
dgtxrdfmdl.dll
dkxrstqxqp.dll
dkxrstqgmp.dll
1205044738.dll
drnpfdxfqd.dll
1205910046.dll
drnpfdxrqv.dll
drnpfdxlwn.dll
Nem.exe
1206376728.dll
kdftlboeopx.dll
kdftlboekae.dll
svpekgonpla.dll
kdftlboeorn.dll
drnpfdxwgv.dll
svpekgonnof.dll
VnrPack16.exe
X_Bat.exe
{92231ca8-6735-3805-6978-a81989a12c5c}.dll
214075.dll
jfkrgotvbl.dll
lotbiagfcnwfyt.dll
WindowsUpdate.scr
iexplore.exe
mehoheru.dll
rayefeku.dll
falozogi.dll
kunobesi.dll
hbgxcskv.dll
jwijtmho.dll
qfhhjktg.dll
rlrrouby.dll
awbvidpb.dll
cpexlhho.dll
ljJbaaWq.dll
qoMeedca.dll
fgkswlwb.dll
vtstu.dll
WODefragmenter.exe
WindOptimizer.exe
Dos%*0Optimizer.pif
ARCHPR.EXE
gpld1.exe
i[1].exe
pphc1kdj0elbj.exe
pphc1q9j0e5vc.exe
pphcr66j0e11c.exe
pphclpmj0e73r.exe
pphc31wj0e9ea.exe
pphcjuej0en4o.exe
pphcruaj0e355.exe
.tt89.tmp
pphcn3jj0epf7.exe
pphc38wj0e7er.exe
pphcn4nj0e58t.exe
pphcvmfj0e5a1.exe
pphc5bdj0ec4v.exe
rnqcylr.exe
rvdvgqdv.dll
1091644937.exe
699415262.exe
dmdvpnvmq.dll
dwrmntsklr.dll
dgtxrdfrmw.dll
1204014479.dll
1204138777.dll
codef.dll
xpa0803_en.exe
pgvknqnm.exe
wdahqpyd.exe
marwin32.dll
iuqrvxiiqzue.dll
gvtl.dll
nsu8E.dll
SysAgentSrv.exe
kyzuztq.dll
xxyvskbx.dll
rqRLdCvv.dll
grlxftr.dll
onatofat.exe
putosejo.dll
ekkadp.dll
bewoyewo.dll
ninegozu.dll
funeroga.dll
fugajezu.dll
kihipapo.dll
uliijd.dll
thbezm.dll
vgruik.dll
axonatuqicacepe.dll
tuvvmfee.dll
BN11.tmp
tzizz.exe
llwap.exe
iihon.exe
beggd.exe
nxhlx.exe
efcYQKde.dll
opnopQji.dll
geBqNhig.dll
qtmkg.exe
pmnoMgFW.dll
SrvCheck.dll
xcvghqni.exe
nse13.dll
fmectypymxa.dll
cjpqtxmnmgjsisbd.dll
exmxzftiqya.dll
nsd74A.dll
proto.dll
VistaDrive.exe
persistentLove.exe
winobb32.dll
wyyo.dll
wyyo.exe
explorer.exe
YAHOOM~1.EXE
9129837.exe
_A00F50F519.exe
vyefpfmh.dll
hkxqdwbq.exe
mharsxyt.exe
revkxadi.exe
fqjetcxm.exe
nctqlyds.exe
rgbchirk.exe
sjelcvad.exe
tqnknmfw.exe
efkpgpyf.exe
inudylen.exe
ofctitup.exe
pqrspmlq.exe
jojmrgdu.exe
wjalwrgl.exe
vmtmhuhc.exe
uhybkxen.exe
pgrabiva.exe
gjctitkx.exe
ejyjmlwr.exe
tejcxabw.exe
pchyjqtw.exe
nsdsnajk.exe
zojipsfi.exe
epajslul.exe
zmlonwlu.exe
repsrylq.exe
ie.exe
SearchAndDestroy.exe
Weather.exe
apsaxu.dll
kiasys.dll
winsurf.dll
iksagy.dll
apsaps.dll
tasant32.dll
apdoxu.dll
AntiSpywareShield.exe
ANTIVIR.exe
444.471
444.470
zumie.dll
pphcc4dj0epbv.exe
pphcpgsj0ega1.exe
BraveSentry.exe
Bat.dll
X_Batter.exe
AOL_security_toolbar.dll
mirc.exe
webhdll.dll
WinAntivirusPro.exe
wspwprtc.exe
setup_10014_509_.exe
jfytyo.dll
MWSBAR.DLL
snatodot.exe
czwzglcz.exe
ivspevej.exe
hmipcetg.dll
crybpufg.dll
reckhqks.dll
B.tmp
dbutil.dll
setup62.exe
219.tmp
xrt_jgmv.exe
aodnds.dll
pfad.dll
zycdex.dll
mttwfh.dll
fsrgeb.dll
mghefy.dll
zgtwfx.dll
ddserh.dll
ydggsx.dll
rfdswc.dll
jfdses.dll
zefdst.dll
jhfrxz.dll
cedafb.dll
hhrdxd.dll
zsdgff.dll
fmcvxy.dll
tdfhex.dll
xpa2008.exe
Power-Antivirus-2009.exe
IntelligentAdvisor-2.dll
vedxg6ame4.exe
CbEvtSvc.exe
.tt7.tmp
.tt285.tmp
CdbgEvtSvc.exe
lphcvdfj0epm7.exe
renabcom4.exe
pcntmtdl.exe
aduic.dll
VirusRemover2008_Setup_Dual_en[2].exe
1.dll
a82sD246.dll
lgmxvpatfbo.dll
nldfmtapefs.dll
boqnrwdmfrp.dll
nogxfvbllna.dll
kvsdpfeagep.dll
wbxdpgfefse.dll
nfavxwdblpd.dll
kgxmotapqtm.dll
nfavxwdbdfm.dll
wnlmdakqfne.dll
wnlmdakqenv.dll
vmgspntbmaq.dll
dfmlxbpkbkl.dll
nkefbltdltv.dll
QdrPack15.exe
GetModule19.exe
VnrPack18.exe
Skra.exe
b104.exe
webtools.dll
compatu.dll
BtCoreI.dll
comaddi.dll
commdl.dll
cewmd.dll
3077ahntdksr[1].dll
ipro.dll
Dot1XCfg.exe
winupdate.exe
wserving.exe
Firewall.exe
nabmlare.exe
edwnghyb.exe
tujwbkbm.exe
nod32se.exe
ati2evxx.exe
sbsm.exe
sbmntr.exe
scm.exe
pxgdslro.dll
ubodh.exe
vregfwlx.dll

Worm.Autoit DLL's to remove:

Starter.dll
termew32.dll
dnscfo32.dll
mdhcp32.dll
6to4ex.dll
pofokago.dll
efcdEuSj.dll
ykiijcvp.dll
ssqrSJYp.dll
lmkwovkh.dll
woyawizi.dll
hemodizi.dll
tikiyabu.dll
bepesata.dll
hgGwTnmk.dll
nukatojo.dll
hjengine.dll
fisalunu.dll
ant_sr.dll
WebExcellenceAdviceTool.dll
paasypcqyvxhpdcx.dll
ybyxmtotthl.dll
liser.dll
ipuvoqububukuk.dll
opnnOiHW.dll
bpitvjbkuryoe.dll
{9ad1e5fc-2f85-c796-01a0-74aec6c37325}.dll
gghsehlusgqposyug.dll
784953.dll
uqawntfe.dll
iwvxlagu.dll
oondmaad.dll
oetfjink.dll
ocrbqpgd.dll
nxiucxfb.dll
cnihewjv.dll
leisytrf.dll
ffjetkxh.dll
lgjpursr.dll
mtoblvar.dll
vtUlMgGy.dll
SiteAccess.dll
hiyusago.dll
aeemdnvp.dll
undubxnr.dll
pljybgiy.dll
fmmhvcat.dll
oesbbe.dll
systb.dll
dsound3dd.dll
~3.dll
gsf83iujid.dll
antit.dll
crypt3232.dll
PersonalWebIE_v1406.dll
cbXPJCSk.dll
lesaluhu.dll
feyiloto.dll
wtvmyakx.dll
hpmtoxvq.dll
nwarox.dll
ntomjwid.dll
aziganoweturetoz.dll
hrzhhmpqli.dll
bixstmhn.dll
xaavpocv.dll
kkzcbb.dll
nybioc.dll
iqlmviwc.dll
dgtxrdfxlw.dll
1204556042.dll
dmdvpnqfv.dll
dgtxrdfwrv.dll
dgtxrdfnfq.dll
dgtxrdfmdl.dll
dkxrstqxqp.dll
dkxrstqgmp.dll
1205044738.dll
drnpfdxfqd.dll
1205910046.dll
drnpfdxrqv.dll
drnpfdxlwn.dll
1206376728.dll
kdftlboeopx.dll
kdftlboekae.dll
svpekgonpla.dll
kdftlboeorn.dll
drnpfdxwgv.dll
svpekgonnof.dll
{92231ca8-6735-3805-6978-a81989a12c5c}.dll
214075.dll
jfkrgotvbl.dll
lotbiagfcnwfyt.dll
mehoheru.dll
rayefeku.dll
falozogi.dll
kunobesi.dll
hbgxcskv.dll
jwijtmho.dll
qfhhjktg.dll
rlrrouby.dll
awbvidpb.dll
cpexlhho.dll
ljJbaaWq.dll
qoMeedca.dll
fgkswlwb.dll
vtstu.dll
rvdvgqdv.dll
dmdvpnvmq.dll
dwrmntsklr.dll
dgtxrdfrmw.dll
1204014479.dll
1204138777.dll
codef.dll
marwin32.dll
iuqrvxiiqzue.dll
gvtl.dll
nsu8E.dll
kyzuztq.dll
xxyvskbx.dll
rqRLdCvv.dll
grlxftr.dll
putosejo.dll
ekkadp.dll
bewoyewo.dll
ninegozu.dll
funeroga.dll
fugajezu.dll
kihipapo.dll
uliijd.dll
thbezm.dll
vgruik.dll
axonatuqicacepe.dll
tuvvmfee.dll
efcYQKde.dll
opnopQji.dll
geBqNhig.dll
pmnoMgFW.dll
SrvCheck.dll
nse13.dll
fmectypymxa.dll
cjpqtxmnmgjsisbd.dll
exmxzftiqya.dll
nsd74A.dll
proto.dll
winobb32.dll
wyyo.dll
vyefpfmh.dll
apsaxu.dll
kiasys.dll
winsurf.dll
iksagy.dll
apsaps.dll
tasant32.dll
apdoxu.dll
zumie.dll
Bat.dll
AOL_security_toolbar.dll
webhdll.dll
jfytyo.dll
hmipcetg.dll
crybpufg.dll
reckhqks.dll
dbutil.dll
aodnds.dll
pfad.dll
zycdex.dll
mttwfh.dll
fsrgeb.dll
mghefy.dll
zgtwfx.dll
ddserh.dll
ydggsx.dll
rfdswc.dll
jfdses.dll
zefdst.dll
jhfrxz.dll
cedafb.dll
hhrdxd.dll
zsdgff.dll
fmcvxy.dll
tdfhex.dll
IntelligentAdvisor-2.dll
aduic.dll
1.dll
a82sD246.dll
lgmxvpatfbo.dll
nldfmtapefs.dll
boqnrwdmfrp.dll
nogxfvbllna.dll
kvsdpfeagep.dll
wbxdpgfefse.dll
nfavxwdblpd.dll
kgxmotapqtm.dll
nfavxwdbdfm.dll
wnlmdakqfne.dll
wnlmdakqenv.dll
vmgspntbmaq.dll
dfmlxbpkbkl.dll
nkefbltdltv.dll
webtools.dll
compatu.dll
BtCoreI.dll
comaddi.dll
commdl.dll
cewmd.dll
3077ahntdksr[1].dll
ipro.dll
pxgdslro.dll
vregfwlx.dll
wpvmqosg.dll
sigma64.dll
asc94.dll
xvorfwbd.dll
z_view.dll
gnowmebk.dll
okmdepgb.dll
qegbdmwf.dll
hpi.dll
domie.dll
pntqkflv.dll
xokvrpwg.dll
Gtool.dll
wnslvxtf.dll
eqvwamkl.dll
vtqnxfko.dll
videoa32.dll
tsxngabr.dll
drvvoj.dll
rqbmvpso.dll
pdoskegl.dll
dgksvbpn.dll
supsafe.dll
ns28kut1.dll
qipauzax.dll
winpi77.dll
winnl77.dll
sfuedqyv.dll
klqvlb.dll
lhtjmj.dll
mozvtz.dll
nsqpuh.dll
stejna.dll
vcwdcvdg.dll
tzobbx.dll
ttrnpt.dll
uhnkgxkk.dll
jhglhv.dll
vqftcx.dll
odutce.dll
itnsxo.dll
ausfnybssw.dll
gzmrotate.dll
xwcfcpelis.dll
azdjmlrkbftv.dll
thbvnxmagspsjirn.dll
zqiloafakvi.dll
kxmjmclwvlfa.dll
etsejmujtw.dll
pwakdnwqmdesytpg.dll
zicsgkbpowpcwma.dll
ynjricyzpbcbk.dll
lgejewpdkhcpfvpt.dll
hqqxssqhgdi.dll
kdftlboeswk.dll
svpekgonlop.dll
iesearch.dll
svpekgonrlo.dll
svpekgongpv.dll
temlxopqaqg.dll
temlxopqwsp.dll
temlxopqqem.dll
nslbvxpgrno.dll
nslbvxpgtkn.dll
qnmargolqgp.dll
qnmargolbve.dll
qnmargolwog.dll
qnmargolgnm.dll
qvlbodmnmle.dll
nldfmtapnvb.dll
boqnrwdmstg.dll
boqnrwdmkrs.dll
boqnrwdmrdv.dll
boqnrwdmqed.dll
ksendlbtdpl.dll
kgqfweltdeg.dll
kgqfwelttko.dll
gfetqaxsbfk.dll
gfetqaxsrob.dll
ksendlbtxqd.dll
wbxdpgfevkl.dll
kgxmotapexd.dll
rodqgpvlkoa.dll
vanwxemgfwn.dll
vanwxemgtro.dll
vanwxemgaet.dll
qnmargolktr.dll
vanwxemgvdp.dll
bdgmioxx.dll
bumeniyi.dll
topupabe.dll
puwukehe.dll
hjxigp.dll
bedihidu.dll
znwrup.dll
bafoline.dll
pikekise.dll
bobebeji.dll
woyohipo.dll
magagovi.dll
xgrfng.dll
komaziza.dll
folopaga.dll
tibufenu.dll
rotatopu.dll
heredetu.dll
wefovuzi.dll
pakurowe.dll
wahezelo.dll
mivohilu.dll
juvoguru.dll
batiweja.dll
vujikuro.dll
zksjwt.dll
pwqupysn.dll
jimarofi.dll
bigivofo.dll
siyipino.dll
lonayemu.dll
yofiyuya.dll
pgkhct.dll
byXRLFYR.dll
efcCvTjH.dll
edeluhsn.dll
pyqxdnom.dll
mhhaykxq.dll
xavvvcou.dll
jbgqbkkd.dll
tmpokmgp.dll
zejuwuko.dll
fimohinu.dll
guyuzera.dll
pufuyada.dll
dayoyadu.dll
dpuppl.dll
fizukodi.dll
kagogomi.dll
tupemawu.dll
pidokofu.dll
atgban.dll
kreirgoa.dll
gtxepaus.dll
myxwrcbc.dll
hyduqkpl.dll
dqxexhcq.dll
wgigntqr.dll
mmhibixa.dll
cxjfvdio.dll
whjswuhp.dll
oiexpppu.dll
nsnoiryo.dll
jpwcecbs.dll
gnjhoebf.dll
voeqbcmm.dll
ujlfhuts.dll
fardlitf.dll
arcjamnp.dll
rqRJbCsP.dll
bilywcvv.dll
cdrhpfqn.dll
egkilyns.dll
aydmyikm.dll
cfmyaabd.dll
tueugsmf.dll
ufuoohei.dll
mfgdwttx.dll
doytfhxl.dll
nrmyfihy.dll
jmeunffk.dll
usxfxxsy.dll
lifrxibo.dll
wgmxmdpv.dll
dprbnxwc.dll
uamdexdq.dll
vfxoodww.dll
wolvdbsx.dll
fvjkokjw.dll
adowarru.dll
epmpioyj.dll
lufsmufa.dll
nwptifru.dll
lmagsqoi.dll
cbcecopw.dll
ysbnxjoi.dll
jhcubtjm.dll
khsinuro.dll
ogljmkua.dll
qtoowonx.dll
chkhgydm.dll
qhuaqvpl.dll
ifczvg.dll
labtkekw.dll
vypvdbnc.dll
uopiujke.dll
yujodytr.dll
frxojarl.dll
jbqnmdyr.dll
htgnkqft.dll
kupnoc.dll
djbfkdax.dll
qujalwxc.dll
bghmniui.dll
nixddl.dll
vcfocuut.dll
jxlqgxqm.dll
kfduak.dll
nvucnahw.dll
sdpltjje.dll
eqphbydp.dll
eytbox.dll
foxynhhp.dll
hjqastkj.dll
bvkavllr.dll
pswqcxvo.dll
jtvknq.dll
itfdyl.dll
rdfmwlvo.dll
vmtlkbjk.dll
dpkjljgn.dll
morcol.dll
stuqektd.dll
gngqxy.dll
tdxoqmnn.dll
oxyvinhl.dll
domutq.dll
wyjenl.dll
lkukysbh.dll
wcjnvwkh.dll
jaygegnf.dll
tjlbbrst.dll
ognftt.dll
ifmwinun.dll
xpippphy.dll
simnmlfx.dll
brkgknsg.dll
rovvltmr.dll
hammxvti.dll
tqjwmejh.dll
stnkjgdo.dll
mnwdftgj.dll
usajuyih.dll
opyxwjwx.dll
mhtvtadn.dll
fdflwkkl.dll
ofqwqxjn.dll
cvrbxnhm.dll
xqnowf.dll
whckskgs.dll
dhbfjtjb.dll
ghstynmd.dll
plowspra.dll
jlrkowck.dll
xkmwjfhy.dll
hngynlgm.dll
vljeqe.dll
vmwcaz.dll
nveefrin.dll
uoefaiaw.dll
yvdgof.dll
flqwatgi.dll
cfyqgy.dll
ijvtlbmi.dll
qjkhaqjy.dll
zztlkl.dll
ywoolgcs.dll
pmwebdla.dll
smsumcqp.dll
ofwfaodw.dll
nqqqgnay.dll
hiexsojp.dll
ngjgcxwv.dll
lchqjwng.dll
yrbqlmrj.dll
zzzvyj.dll
pgpwketa.dll
dsgchauj.dll
kzddpd.dll
vtbdqi.dll
okgvrv.dll
jxggsp.dll
urvvrevf.dll
vvcjidiw.dll
qhpwpkpe.dll
sikgpg.dll
qcwcbypw.dll
njmxdjfj.dll
nvrxxael.dll
qvslys.dll
bijjtmmb.dll
xkfacf.dll

Worm.Autoit processes to kill:

KILLDISK_WIN.EXE
psvrr.exe
zchMiB.exe
regsvr.exe
install_incredimail.exe
configuration.exe
WNG.exe
svcodecs.exe
STC3.exe
ju7bd.exe
aadrive32.exe
Recycle.Bin.exe
Marvell Lan Driver2.exe
Perx.exe
avupdate.exe
RVHOST.exe
iufgotis.exe
ConSvc.exe
csrcs.exe
mgy.exe
_SystemUpdate.exe
svrchost.exe
SSVICHOSST.exe
abest.exe
PreInstaller[1].exe
16723754.exe
96733746.exe
16692344.exe
atom exit.exe
lphcvb7j0epbg.exe
run.exe
14945624.exe
94955616.exe
JavaCore.exe
MDdccb.exe
17722954.exe
wvore.exe
bndmss.exe
f9ssyypbuw.exe
AMC.exe
SuSoft.exe
92410306.exe
12400314.exe
90255456.exe
10245464.exe
hdwf.exe
tag12.exe
msupdt.exe
MD3d6b.exe
_A00F481DE.exe
vwva.exe
oell.exe
qgipz2469937.exe
r56ujxftyrsdjsxrgf46i5sgheh44.exe
winpad32.exe
bios.exe
nvsvc32.exe
X_Spruce.exe
Contraviro.exe
ContraviroInstall[1].exe
14147964.exe
94157956.exe
ld10.exe
rru.exe
sysstem.exe
drwt32.exe
sever.exe
17304414.exe
liser.exe
SurferClient.exe
msbcs.exe
iissrv.exe
fevr.exe
winsysrv.exe
killer_rodog.exe
vir-remover-pro[1].exe
virusremover.exe
vowtjs.exe
47.tmp.exe
zeagaa.exe
psystem[1].exe
Trjscan.exe
ActiveScanz.exe
16140934.exe
18355614.exe
98365606.exe
93325616.exe
99926866.exe
19916874.exe
93789346.exe
13779354.exe
10639534.exe
90649526.exe
90598116.exe
10588124.exe
windupdates.exe
_A00F6A9D154.exe
WToolsA.exe
wupdt.exe
exp.exe
pascw.exe
SpywareBot.exe
protector.exe
~1.exe
wprcaw.exe
19353904.exe
99363896.exe
91457186.exe
11447194.exe
18058594.exe
winzz.exe
hjktvx.exe
Hyden.dll.exe
nl.exe
ree1.exe
ree2.exe
14973654.exe
94983646.exe
romeo15.exe
bittorrent.exe
nodlogin.exe
AntiSpyware Pro.exe
ld09.exe
18563124.exe
96856706.exe
16846714.exe
99388276.exe
19378284.exe
afuya1119762.exe
RemoveWGA.exe
init.exe
lwinqldi.exe
Smart Antivirus-2009.exe
PAVRM.exe
SetupAdvancedVirusRemover[1].exe
defender32.exe
CcEvtSvc.exe
freddy46.exe
SYSDLL.exe
websrvx.exe
depirmny.exe
dllhost.exe
_A00FEBA65A.exe
ihost.exe
14865934.exe
94875926.exe
Nem.exe
VnrPack16.exe
X_Bat.exe
iexplore.exe
WODefragmenter.exe
WindOptimizer.exe
gpld1.exe
i[1].exe
pphc1kdj0elbj.exe
pphc1q9j0e5vc.exe
pphcr66j0e11c.exe
pphclpmj0e73r.exe
pphc31wj0e9ea.exe
pphcjuej0en4o.exe
pphcruaj0e355.exe
pphcn3jj0epf7.exe
pphc38wj0e7er.exe
pphcn4nj0e58t.exe
pphcvmfj0e5a1.exe
pphc5bdj0ec4v.exe
rnqcylr.exe
1091644937.exe
699415262.exe
xpa0803_en.exe
pgvknqnm.exe
wdahqpyd.exe
SysAgentSrv.exe
onatofat.exe
tzizz.exe
llwap.exe
iihon.exe
beggd.exe
nxhlx.exe
qtmkg.exe
xcvghqni.exe
VistaDrive.exe
persistentLove.exe
wyyo.exe
explorer.exe
9129837.exe
_A00F50F519.exe
hkxqdwbq.exe
mharsxyt.exe
revkxadi.exe
fqjetcxm.exe
nctqlyds.exe
rgbchirk.exe
sjelcvad.exe
tqnknmfw.exe
efkpgpyf.exe
inudylen.exe
ofctitup.exe
pqrspmlq.exe
jojmrgdu.exe
wjalwrgl.exe
vmtmhuhc.exe
uhybkxen.exe
pgrabiva.exe
gjctitkx.exe
ejyjmlwr.exe
tejcxabw.exe
pchyjqtw.exe
nsdsnajk.exe
zojipsfi.exe
epajslul.exe
zmlonwlu.exe
repsrylq.exe
ie.exe
SearchAndDestroy.exe
Weather.exe
AntiSpywareShield.exe
ANTIVIR.exe
pphcc4dj0epbv.exe
pphcpgsj0ega1.exe
BraveSentry.exe
X_Batter.exe
mirc.exe
WinAntivirusPro.exe
wspwprtc.exe
setup_10014_509_.exe
snatodot.exe
czwzglcz.exe
ivspevej.exe
setup62.exe
xrt_jgmv.exe
xpa2008.exe
Power-Antivirus-2009.exe
vedxg6ame4.exe
CbEvtSvc.exe
CdbgEvtSvc.exe
lphcvdfj0epm7.exe
renabcom4.exe
pcntmtdl.exe
VirusRemover2008_Setup_Dual_en[2].exe
QdrPack15.exe
GetModule19.exe
VnrPack18.exe
Skra.exe
b104.exe
Dot1XCfg.exe
winupdate.exe
wserving.exe
Firewall.exe
nabmlare.exe
edwnghyb.exe
tujwbkbm.exe
nod32se.exe
ati2evxx.exe
sbsm.exe
sbmntr.exe
scm.exe
ubodh.exe
TXPlatform.exe
8764.exe
setup73.exe
xpupdate.exe
lahmtcho.exe
maxpaynow.exe
wdarqxox.exe
jiryrclc.exe
qbynahkr.exe
lphcamlj0ea8a.exe
_A00F299C205.exe
video.avi[1].exe
664575600.exe
_A00F265D3B.exe
rnbqp.exe
npqtsrak.exe
scit.exe
mdyvgtwp.exe
epmbulun.exe
gfwrcbmx.exe
ovwpshwz.exe
wzufifcx.exe
_A00F52ECE1.exe
_A00F189CC1B.exe
jerafctu.exe
_A00F3ECB0D8F.exe
_A00F4D8F7.exe
fbxhs.exe
QdrPack14.exe
xpscanner.exe
xpa1503_en.exe
90839366.exe
17236094.exe
lwinkmdt.exe
dwdsrngt.exe
NoDNS.exe
gamevance32.exe
bkhujyxs.exe
Antivirus Plus.exe
xpa_eng.exe
xlejc.exe
svobqjwt.exe
msnmsg.exe
kjwbunaf.exe
Msg.exe
city acid.exe
kjdsrngj.exe
upload dart.exe
unmlcrmn.exe
apuvmjkf.exe
kbulapet.exe
ryfuhize.exe
97246086.exe
11120624.exe
1361538659.exe
lphc3h7j0er4g.exe
tdydowkc.exe
noytcyr.exe
wsldoekd.exe
13213434.exe
93223426.exe
mjso.exe
sih.exe
ContraVirusPro.exe
18163.exe
RDPlatinumv5.exe
pm_proc2.exe
vedxg4am1et2.exe
TSCHelp.exe
aspimgr.exe
resfilter32.exe
nnrun.exe
13059684.exe
93069676.exe
Extra Software.exe
wpv451242765100.exe
17170004.exe
Spyware-Secure_repaironce.exe
Adware_Pro.exe
1115687155.exe
1267284512.exe
1345400504.exe
10024412.exe
1814827421.exe
1446255078.exe
mupd1_2_1931888.exe
VnrPack23.exe
GetModule31.exe
GetModule26.exe
VnrBlock20.exe
roytctm.exe
acctresr.exe
aamd532d.exe
saiuwwl.exe
ecx.exe
hvccs.exe
fechme.exe
nsxflo.exe
qkjp.exe
XPSecurityCenter.exe
freddy45.exe
freddy42.exe
pp2.exe
che3.exe
mstre6.exe
uwasdc.exe
zango.exe
RegFixPro.exe
gbiesrv.exe
netfx20.exe
dmgmi.exe
TND.exe
akl.exe
NBAW.exe
HFBL.exe
system32EFQX.exe
EVDP.exe
fmsiocps.exe
kvliprie.exe
q041wz8.exe
winlognn.exe
winlogan.exe
retadpu922.exe
mrofinu72.exe
lphc7g8j0ev0t.exe
lphc93oj0egev.exe
lphc1ppj0ec9j.exe
lphccn4j0eadc.exe
lphcj74j0ec75.exe
lphc3gsj0e95n.exe
lphcvttj0e93g.exe
lphccr5j0e90g.exe
lphccmjj0ej4g.exe
lphcnjrj0e78c.exe
lphcrj3j0ee8j.exe
lphc30rj0egd7.exe
lphcc2ej0e71t.exe
lphcpkgj0e98r.exe
lphcalbj0eec1.exe
lphc3gfj0ej87.exe
lphc9maj0e7dn.exe
lphcn6lj0e1b9.exe
lphc3coj0er1a.exe
lphceltj0e52n.exe
lphc1lbj0eef1.exe
lphca90j0et3p.exe
lphcgl1j0ev09.exe
lphcp27j0eg75.exe
rhcjgjj0ecfp.exe
lphcn4mj0ec8j.exe
lphcjosj0erb7.exe
lphc9vcj0e16n.exe
lphcctsj0ec75.exe
winds32.exe
shcvw0j0egna.exe
ajixmghia.exe
wind32.exe
maxpaynow1.exe
ctfmona.exe
sysrest32.exe
taskmon.exe
BluetoothAuthorizationAgent.exe
k.exe
wpv091242765100.exe
wpv101242765100.exe
1ztwvzh.exe
orkutkut.exe
402792673.exe
22497.exe
440059563.exe
xrt_ojgr.exe
xrt_jdks.exe
video1152.cfg.exe
lphcamfj0evag.exe
q2l0zaatdu.exe
8eac5uw1z0.exe
afmw1bft9by.exe
mjsgrclw20vm.exe
1uw0wo.exe
1a.exe
amb1avl.exe
klbk.exe
mdm.exe
nlqouecs.exe
HotbarSA.exe
eedtaeop.exe
_A00F6A691D47.exe
head2.exe
SBUSA.exe
ZangoSA.exe
salm.exe
SpyLocked 3.6.exe
1855199700.exe
32209.exe
groupmanager.exe
vBDztarpqGYfoMnu.exe
73935584.exe
mscheck2.exe
msdefender.exe
ShowBehind.exe
sysvtypkbjx.exe
GMS2.exe
winsysban12.exe
ntsystem.exe
ocntlkdm.exe
rcntkkdm.exe
scntkkdm.exe
scnttkdm.exe
scntrkdm.exe
lcntrkdm.exe
ocntksdl.exe
thinksnet.exe
tcntrkdm.exe
pcntrkdm.exe
lcntpkdm.exe
mcntqkdn.exe
TISKY002.exe
pwinqmdt.exe
5765.exe
theof.exe
leia.exe
NeroCheck.exe
licao_de_vida.exe
syst.exe
Msxrs.exe
soundmix.exe
KAVStart.exe
TpScrex.exe
msb.exe
Terry Santi.exe
4115.exe
b1jl2V0m.exe
wpiv.exe
~tmpp.exe
~tmp3.exe
pCo7V3H8.exe
1rlkp3G3.exe
OPLlho18.exe
2XKM2nX1.exe
ert56264.exe
yyy10930.exe
explorer32.exe

Remove Worm.Autoit registry entries:

HKEY_CURRENT_USER\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\RUN\ Yahoo Messengger
HKEY_LOCAL_MACHINE\SOFTWARE\MICROSOFT\WINDOWSNT\CURRENTVERSION\WINLOGON\USERINIT\ userinit
HKEY_LOCAL_MACHINE\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\RUN\ cftu
HKEY_LOCAL_MACHINE\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\RUN\ HKLM
HKEY_LOCAL_MACHINE\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\RUN\ HotKeysCmds
HKEY_LOCAL_MACHINE\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\RUN\ mgy
HKEY_LOCAL_MACHINE\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\RUN\ MSI
HKEY_LOCAL_MACHINE\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\RUN\ Msmsgs
HKEY_LOCAL_MACHINE\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\RUN\ run32
HKEY_LOCAL_MACHINE\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\RUN\ SysSrv
HKEY_LOCAL_MACHINE\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\RUN\ SystemUpdate

Comments

methaic Apr 6, 2009
ok good

Post comment — WE NEED YOUR OPINION!