Wednesday, 21 August 2013

How can I Get Rid of Worm:Win32/Phorpiex.O From My PC?

Worm:Win32/Phorpiex.O is a malicious computer infection which is distributed through instant messaging software, such as Google Talk, ICQ, Paltalk, Skype, Windows Live Messenger and Xfire. It is a worm that drops other malevolent files that may be found as malware on the compromised PCs. You need to get rid of Worm:Win32/Phorpiex.O as soon as you find its existence.
 If you often use instant messaging programs, Worm:Win32/Phorpiex.O may be downloaded and installed unintentionally when you download or open a picture sent by the worm. If one of your contacts is suffering from this infection, his instant application account will automatically send message to spread the worm to all of his contacts, including you. The message is localized and based on the set language of the compromised PC. It strives to attract or fool others into downloading and opening a picture, which may be a copy of Worm:Win32/Phorpiex.O.
 While being installed on the infected computer, the worm makes system changes by showing a message or link in your Skype,, Google Talk, Paltalk, Xfire, ICQ, or Windows Live Messenger conversation history that the computer user does not recall writing. Worm:Win32/Phorpiex.O attempts to download a file (detected as Worm:Win32/Phorpiex.O) from "https://.com/dl/177936932/497544a/mkk.exe.html".The file is downloaded to the %TEMP% folder with the file name ".exe". Then it runs the file to perform illicit computer actions. Related encyclopedia entries Once the payload is performed, Worm:Win32/Phorpiex.O downloads and runs the specific file to uninstall itself from the PC.

How to remove Worm:Win32/Phorpiex.O step by step manually?

Step 1. Restart your PC and press F8 repeatedly before Windows loads. Use the up and down arrow keys to choose Safe Mode with Networking in Windows Advanced Options menu and then press Enter. 

Step 2. Open Task Manager by pressing Ctrl + Alt + Delete. In Processes tab, select the process of Worm:Win32/Phorpiex.O and click End process to stop it. 
[random].exe 

Step 3. Erase registry entries generated by the worm. 
HKEY_CURRENT_USER\Software\twk70 HKEY_LOCAL_MACHINE\SOFTWARE\Micrsoft\Windows\CurrentVersion\Run Velyqyuf = “%AppData%\urwqyi.exe” 

Step 4. Delete the component files dropped by the infection. 
%TEMP%\.exe %TEMP%\NRRQSCAkYD.zuG
 %TEMP%\rmrf.bat 
%TEMP%\ZSa.tmp 

Steps above will help you remove Worm:Win32/Phorpiex.O completely. If you want to save time and delete the worm automatically, a professional removal tool is the best choice for you.

No comments:

Post a Comment