Are you a victim of W32.Scrshotvid? As soon as you find the worm in your computer, you should remove W32.Scrshotvid immediately before it is too late. This worm is may arrive hidden in a legitimate clean program, affects Windows 98, Windows 95, Windows XP, Windows Me, Windows Vista, Windows NT, Windows Server 2003, Windows 2000. Remove W32.Scrshotvid by folloing this proven instruction before it wreaks havoc on your computer or network.
What does W32.Scrshotvid do in a compromised computer?
After the w32 worm gains access to a computer, %Windir%\comres.dll will be created. When W32.Scrshotvid is triggered, following files will be created in the computer.
%System%\USP10\usp10.dll
%System%\xmd.exe
log.sc
Correspondingly, W32.Scrshotvid will create malicious registry entries as below
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Session Manager\”ExcludeFromKnownDlls” = “usp10.dll”
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\[SERVICE NAME]\”Type” = “120″
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\[SERVICE NAME]\Parameters\”ServiceDll” = “svcdll”
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\[SERVICE NAME]\Parameters\”InstallPath” = “[PATH TO WORM]“
Notes: W32.Scrshotvid will disguise itself as usp10.dll and store data in log.sc.
How to remove W32.Scrshotvid completely
Though we know all the traces of W32.Scrshotvid, it is still very difficult to remove them completely in manual way, as the worm reduplicate very fast and any remaining part of W32.Scrshotvid can recreate the worm. If you are experienced with worm removal, you could have a try.
1. Disconnect your computer with networking
2. Run windows task manager to kill usp10.dll process
3. Search usp10.dll,xmd.exe and log.sc in computer and delete them completely
4. Delete W32.Scrshotvid registry entries
5. Restart computer
If your computer infected with worm virus and your security program unable to kill it, we suggest you try PC Safe Doctor. This professional anti-spyware program has successfully removed all the worms and viruses from many PCs with high quality. Do you want to keep your windows worm free at once? Download PC Safe Doctor to remove W32.Scrshotvid now.
- W32.Griptolo Removal Tips – How Can You Clean Up W32.Griptolo from Computer
- Find the Free W32.Yunsip Removal Tutorial and Perfect for Your PC
- Get Rid of W32/YahLover.Worm.gen with Easy and Effective Method
- Remove W32/Nuwar@MM!rar – How to Keep Your PC Away from W32/Nuwar@MM!rar
- Malware.Drsmart.A
- Net-Worm.Win32.Kolab.hsm
- Worm.Win32.VBNA.ahub
- Spy Devastator Removal Techniques - How to Easily Get Rid of Spy Devastator
- Eliminate Rootkit.Order - Instruction to Get Rid of Rootkit.Order from PC Instantly
- Winweb Security 2008
- How to Remove Trojan:DOS\Alureon and Keep Your Computer Secure from Trojan
- Cleaner 2009
- Adware Removal Help - How to Permanently Eliminate the AdWare.Win32.Gaba
- How to Remove and Prevent Trojan.PatchLoad.B!inf Effectively
- Unlimited Defender - How to Get Rid of This Malware from Your PC
- How Can I Get Professtional Help to Delete Shopcompareus.com
Very nice solution.
...I wonder if there are other ways can fix the infection instantly
...I think it’s a virus, too–or is susceptible to being infected because my anti-virus regularly quarantines this file
...Nice one, there is actually some good points on this blog some of my readers may find this useful, I must send a link, many thanks.
...I spent about half an hour following these guidelines to a tee
...What’s Taking place i’m new to this, I stumbled upon this I’ve found It absolutely useful and it has helped me out loads. I am hoping to contribute & help different users like its aided me. Good job.
...