Latest in trend:

» viruses

Net-Worm.Win32.Kido.ih

What is Net-Worm.Win32.Kido.ih?

How does it affect your PC?

How to remove Net-Worm.Win32.Kido.ih manually?

What is Net-Worm?

Net-Worm.Win32.Kido.ih worm is a type of virus that is often known as worm creation tools. It is malicious program that spreads itself without prior permission of the user. They will have the unique quality of self replicating, and thus intend in destroying your system

 

Characteristics of Net-Worm.Win32.Kido.ih

Some of the distinguished features of Net-Worm.Win32.Kido.ih are:

• It takes delight in exploiting the Microsoft Windows Server Service RPC code execution vulnerability.
• Ability to block security related software by modifying firewall settings, and by disabling security services such as Windows Update, Norton Autoprotect, Kaspersky Anti-Virus etc.
• Potential enough to create the file autorun.inf on any accessible mapped drive so that it executes whenever the drive is accessed.
• It has got another feature of an identified security risk.

Back to top

 

How does it affect your PC?

It would be a devastating experience for those who would have been the victim of these malicious applications. Once your system gets affected by these harmful viruses, it can be a loss to a greater extent. Some of the viruses such as Net-Worm.Win32.Kido.ih would destroy the system completely. Initially, it so happens that it will gradually slow down the performance of your system. Later on, there will be identity theft, modify the data and ultimately the loss of your personal information too!

• Sometimes the virus would execute the file with random names such as:
  %System%\<rnd>dir.dll
  %Program Files%\Internet Explorer\<rnd>.dll
  %Program Files%\Movie Maker\<rnd>.dll
  %All Users Application Data%\<rnd>.dll
  %Temp%\<rnd>.dll
  %System%\<rnd>tmp
  %Temp%\<rnd>.tmp

You would be wondering when these harmful viruses would launch itself in the system, trying to modify registry key value such as:
[HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SvcHost]
"netsvcs" = "<original value> %System%\<rnd>.dll"

Therefore, you should take initiative, prior precautions in safeguarding your system and definitely this would enable you to live peacefully too!

Back to top

 

How to remove Net-Worm.Win32.Kido.ih manually?

It would be wise enough for you to remove these viruses manually and free your computer from the anticipated loss.

• 1. First of all, you can delete the following system registry key such as:

             [HKLM\SYSTEM\CurrentControlSet\Services\netsvcs]

• 2. You can delete “%System%\<rnd>.dll” from the system registry key such as

             [HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SvcHost]
"netsvcs"

• 3. Later on, you can reboot the computer and delete the original affected file.
• You can delete the affected copies by using:
• %System%\<rnd>dir.dll
  %Program Files%\Internet Explorer\<rnd>.dll
  %Program Files%\Movie Maker\<rnd>.dll
  %All Users Application Data%\<rnd>.dll
  %Temp%\<rnd>.dll
  %System%\<rnd>tmp
  %Temp%\<rnd>.tmp
• 4. The next step would be to delete the files from all removable storage media such as:

<X>:\autorun.inf
<X>:\RECYCLER\S-<%d%>-<%d%>-%d%>-%d%>-%d%>-%d%>-%d%>\<rnd>.vmx,

• 5. Finally, you should download and install updates for the operating system.

Additional Windows ME/XP removal considerations

Back to top

© 2009 System-Protector.com All Rights Reserved.