Latest Virus



Threat Name: win.32.small.aply
Spread Method:
Download From website
Threat type:win.32
win.32.small.aply warning from kasper kept popping up sayin that my winlogon.exe was infected with the trojan downloader.
win.32.small.aply first detected:2010-03-07
Virus file known is PE exe file written in C language
File Size:650K Bytes.
Behavior:Downloads files from URLs
Level of Spread:1
Level of Threat:2
Reported Path:Unkonow path
MD5:D5O007dYh1sv1q041w5JjeE02kSWgRIt
SHA1..:LXw3JE1hoL68N63U48Xr62mIP6bf5ap7tG8SRMM5

Alias:
TrendMicro:Backdoor.Win32.Agent.qnl
Rising:Backdoor.Win32.Agent.qoe
F-Secure :Worm.Win32.AutoRun.nnx
Sunbelt Software :Backdoor.Win32.Agent.lqe
Report Countries:
Bulgaria
Romania
Australia
Greece
Egypt
United Kingdom
win.32.small.aply Removal instructions:
Delete the original virus file
How to remove win.32.small.aply :
1.Delete the IE temporary files.
2.Update antivirus database and run a full scan.
3.Run the following the script
begin
SetAVZGuardStatus(True);
SearchRootkit(true, true);
QuarantineFile(’C:\WINDOWS\system32\mwkyil.exe’,”);
DeleteFile(’C:\WINDOWS\system32\mwkyil.exe’);
BC_ImportDeletedList;
ExecuteSysClean;
BC_Activate;
RebootWindows(true);
end.

Tags: win.32.small.aply

Need help? Post you problem on Free Malware Remove Help forum

win.32.small.aply Summary

Virus Name:win.32.small.aply

Detected By:Kaspersky antivirus program

Virus win.32.small.aply Detected times:2316531times

win.32.small.aply Overall Risk:Medium 7316532

win.32.small.aply file size:36165320 bytes

win.32.small.aplywas first Detected by Kaspersky on Sunday, March 7th, 2010 , 12:24 pm,win.32.small.aply is a new threats of Hacking,Malware,Spam,worm.

Remove win.32.small.aply instruction:

1.Temporarily Disable System Restore;2.Reboot computer in SafeMode;3.delte win.32.small.aply virus files and kill win.32.small.aply file task process(if have);4.Delete/Modify any values added to the registry by win.32.small.aply ;5.delete IE temp files,restart the computer and run a whole scan with Kaspersky. win.32.small.aply virus files as following: