Navidad Trojan Information and Removal

What is Navidad Trojan Virus?
This new Internet trojan travels via email. Every response has the subject, "RE:" and the worm as an attachment (NAVIDAD.EXE). This worm also displays a message box upon execution and maps the opening of Windows executables so that it is executed instead of the executable that is called. This causes most Windows programs to not work.

How to Clean/Delete the Navidad Trojan?

The registry needs to edited to delete this Trojan

The easiest solution to cleaning this trojan virus is to download a program to clean up the registry entries and delete the dropped file, WINSVRC.VXD. This download can be found at
http://www.antivirus.com/vinfo/security/fix_navi.com.

After cleaning the system, restart it and run an anti-virus program to detect and clean any other infected files.

How to Manually Clean the Navidad Trojan

  1. Click on Start, Find, Files or Folders
  2. Search for REGEDIT.EXE
  3. Rename REGEDIT.EXE to REGEDIT.COM
  4. Run REGEDIT.COM
  5. In the left panel of the Registry Editor, click on the "+" at left of the names to go to the registry below: HKEY_CLASSES_ROOT\exefile\shell\open\command
  6. In the right panel, double-click on the entry with the data
    (Default) = "%systemdir%\WINSVRC.EXE"%1""%*"
    where %systemdir% is the Windows system directory; e.g., \WINDOWS\SYSTEM for Win 9x, and \WINNT\SYSTEM32 for NT/2K.
  7. In the Edit window that appears, delete the entire first part of the string, leaving behind "%1"%*"
  8. As in step 5, go to the registry entry below:
    HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run
  9. Click on the entry below, then press "DELETE"
    Win32BaseServiceMOD = %systemdir%\WINSVRC.EXE
  10. Go to the registry entry below:
    HKEY_CURRENT_USER\Software\Navidad
  11. Delete this key
  12. Reboot your system
  13. Scan your system with an up-to-date virus scanner
  14. Rename REGEDIT.COM back to REGEDIT.EXE
space.gif (58 bytes)

 

Search PCHell.com



 




Tools for Removing Spyware, Adware, and Malware


PC HELL
Other Pages

Spyware/Adware Removal Help

MSBlast.exe Worm Removal

Welchia (Dllhost.exe and SVCHost.exe) Worm Removal

Uninstall McAfee Instructions

Uninstall Norton Instructions

Uninstall Avast Instructions

Uninstall AVG Instructions

Uninstall Antivir Instructions

Uninstall Panda Instructions

How to Manually Run the Microsoft Malicious Software Removal Tool

Bloodhound.Exploit.6 Virus Removal

MyDoom Virus Removal

MiMail.C Virus Removal

Swen Worm Virus Removal

SoBig.F Worm Removal

Dumaru Virus Removal

BugBear.B Worm Removal

SoBig.E Worm Removal

Pop Up Ad Removal Info

KAK Worm Removal

MiMail.A Worm Removal

W95.MTX Virus Removal

Snow White Virus Removal

BadTrans Trojan Removal

Wininit Virus (Bymer Trojan)

Happy99 Worm Removal

VBS Netlog Worm Removal

Pretty Park Worm Removal

Sasser Worm Virus Removal

Backdoor SDBot.H Trojan Removal

VBS.Loveletter Help

Computer Security Information

Back Orifice Information

PC HELL Main Page

 






iPadastic - News, Tutorials, Help, Tips, and Hints for the iPad



Download Hoyle Games
including Casino 3D, Card, Board, and Solitaire games.



Written by Mark Hasting

Recommended Software for PC Hell Visitors
Malwarebytes Anti-Malware
Malwarebytes Anti-Malware
iolo System Mechanic® - Fix, Speed Up Your PC
iolo System Mechanic®
Emsisoft Anti Malware
Emsisoft Anti Malware
space.gif (58 bytes)

Search PCHELL.COM

Return to PC Hell
Return to PC Hell

Google