If you often use instant messaging programs, Worm:Win32/Phorpiex.O may be downloaded and installed unintentionally when you download or open a picture sent by the worm. If one of your contacts is suffering from this infection, his instant application account will automatically send message to spread the worm to all of his contacts, including you. The message is localized and based on the set language of the compromised PC. It strives to attract or fool others into downloading and opening a picture, which may be a copy of Worm:Win32/Phorpiex.O.
While being installed on the infected computer, the worm makes system changes by showing a message or link in your Skype,, Google Talk, Paltalk, Xfire, ICQ, or Windows Live Messenger conversation history that the computer user does not recall writing. Worm:Win32/Phorpiex.O attempts to download a file (detected as Worm:Win32/Phorpiex.O) from "https://
How to remove Worm:Win32/Phorpiex.O step by step manually?
Step 1. Restart your PC and press F8 repeatedly before Windows loads. Use the up and down arrow keys to choose Safe Mode with Networking in Windows Advanced Options menu and then press Enter.
Step 2. Open Task Manager by pressing Ctrl + Alt + Delete. In Processes tab, select the process of Worm:Win32/Phorpiex.O and click End process to stop it.
[random].exe
Step 3. Erase registry entries generated by the worm.
HKEY_CURRENT_USER\Software\twk70
HKEY_LOCAL_MACHINE\SOFTWARE\Micrsoft\Windows\CurrentVersion\Run
Velyqyuf = “%AppData%\urwqyi.exe”
Step 4. Delete the component files dropped by the infection.
%TEMP%\.exe
%TEMP%\NRRQSCAkYD.zuG
No comments:
Post a Comment