Is your computer infected with W32/virut.gen? This step-by-step guide can help you safely and quickly remove W32/virut.gen. If you have any problem during the removal process, please contact Tee Support agents 24/7 online for more detailed instructions.

W32/virut.gen Description

 W32/virut.gen is determined by Tee Support Labs as malicious network-aware worm that uses known exploit(s) in order to replicate across vulnerable networks.  W32/virut.gen will modify the Hosts file and then  may block access to the security web sites. W32/virut.gen often runs in the background and allows remote access to the compromised system. W32/virut.gen represents security risk for the compromised system and its network environment and should be removed once found on a computer.

W32/virut.gen has security threat shows in the following aspects

  1. W32/virut.gen often infect computer without your permission at the background.
  2. W32/virut.gen allow hacker remotely access to the computer.
  3. W32/virut.gen can spread via network if the infected drive is shared at the network.
  4. Your antivirus software (McAfee) may alert you to get rid of this infection W32/virut.gen.

W32/virut.gen Step-by-Step Removal Instructions

1)  The associated processes of W32/virut.gen to be stoped are listed below:

   90e5.exe, s9zg.exe

   7chsbale.exe, services.exe

   ony13xep.exe, 90e5.exe

   guyik45hbh.exe

2)  The associated files of  W32/virut.gen to be deleted are listed below:

   %Windir%\temp\90e5.exe, %Windir%\temp\s9zg.exe

   %Windir%\temp\7chsbale.exe, %FontsDir%\services.exe

   %Temp%\90e5.exe, %Windir%\temp\ony13xep.exe

   %System%\guyik45hbh.exe

3)  The registry entries of W32/virut.gen that need to be removed are listed as follows (Take Note: Back up the Windows registry before editing it, so that you can quickly restore it later if something goes wrong.):

   HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{346436FA-5138-50DA-D412-0870CE39768B}

   HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{346436FA-5138-50DA-D412-0870CE39768B}\LocalServer32

   HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\Folder\Hidden\NOHIDORSYS

    HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer

   HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer\Run

   HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Tbsolute

   HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\Root\LEGACY_NWCWORKSTATION

   HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\Root\LEGACY_NWCWORKSTATION\0000

   HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\Root\LEGACY_NWCWORKSTATION\0000\Control

   HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\NWCWorkstation

   HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\NWCWorkstation\Parameters

   HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\NWCWorkstation\Security

   HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\NWCWorkstation\Enum

   HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_NWCWORKSTATION

   HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_NWCWORKSTATION\0000

   HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_NWCWORKSTATION\0000\Control

   HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\NWCWorkstation

   HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\NWCWorkstation\Parameters

   HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\NWCWorkstation\Security

   HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\NWCWorkstation\Enum

   HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings\P3P

   HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings\P3P\History


Bookmark and Share
VN:F [1.9.18_1163]
Rating: 0.0/10 (0 votes cast)

Tee Support

Services | Review

Tee Support is an award-winning online tech service 24/7. Tee Support experts provide sophisticated manual solutions:

  • terminate latest, stubborn virus/spyware that an antivirus program can not!
  • specific solution for your specific system: Safe, Effective, Complete.
  • many more services covering various PC problems to meet your requirements.

A good spyware remover can safeguard your computer at real-time automatically. So, pick up one of your favorite to protect your system easily.

However, professional online technical support is highly recommended if you want a more specific, accurate and effective solution toward your specific issue in your specific computer system.

Malwarebytes Anti-Malware

Download | Review

Malwarebytes is one of the most popular and widely used anti-virus and malware-removal software applications for both home and corporate computer users alike.

Spyware Doctor

Download | Review

Award-winning Spyware Doctor with AntiVirus software protects your PC against privacy and tracking threats. Spyware Doctor with AntiVirus detects, removes and secures your PC from potential spyware, viruses, worms and tracking threats.

SpyHunter

Download | Review

SpyHunter is a powerful, real-time anti-spyware application designed to assist computer users in protecting their PC from trojans, rootkits and others.