The problem with manual disinfection is that the latest variant of the AN/Alcra worm (variant D) installs Spybot.
"Gee I gosh reccon this will fix it" isn't good enough for my friends and family, and I hope it's not good enough for yours either.
Spybot listens on an IRC channel for stuff to download and run without the user's permission. It's nasty spyware that allows
the maker of the D variant to take over your computer.
Please encourage people to run real virus removal programs from the experts, followed by real spyware/adware removal tools from the experts.
Quote:
Originally posted by topcop999
Its a virus, simple as that.
It also prevents you running Taskmgr.exe (Task manager) or regedit.exe (Registy editor)
Fisrtly in search your computer for msmovies.exe and delete it.
Then search for regedit.exe and run it.
Within regedit, highlight My Computer and doe Edit/Find msmovies.exe
Delete any entries which make reference to this file msmovies.exe
I have heard of a user who has had a similar problem with another file called winupdates.exe which again was a virus sitting in the memory designed to keep re-loading Limewire.
No doubt there will be more and with different names.
The easiest way is to open task manager and if you computer wont run it search for taskmgr.exe, run it and try removing one task at a time, then close Limewire and give it 30 seconds to see if it re-loads before removing another task. This way you will identify the name of the offending program.
See it's simple good old fashioned computer detection work, so all you Computer Geeks stop rattling on about JAVA updates, internet option and other bollocks and get your logical heads on!
Alex Nisbet |