<?xml version="1.0" encoding="UTF-8"?>
<rss version="2.0"
	xmlns:content="http://purl.org/rss/1.0/modules/content/"
	xmlns:wfw="http://wellformedweb.org/CommentAPI/"
	xmlns:dc="http://purl.org/dc/elements/1.1/"
	xmlns:atom="http://www.w3.org/2005/Atom"
	xmlns:sy="http://purl.org/rss/1.0/modules/syndication/"
	xmlns:slash="http://purl.org/rss/1.0/modules/slash/"
	>

<channel>
	<title>TechVTS Blog. Virus, Trojan &#38; Spyware removal blogs &#187; 3:Virus Removal</title>
	<atom:link href="http://www.techvts.com/security/category/virus-removal/feed/" rel="self" type="application/rss+xml" />
	<link>http://www.techvts.com/security</link>
	<description></description>
	<lastBuildDate>Thu, 09 Sep 2010 09:11:28 +0000</lastBuildDate>
	<generator>http://wordpress.org/?v=2.8.2</generator>
	<language>en</language>
	<sy:updatePeriod>hourly</sy:updatePeriod>
	<sy:updateFrequency>1</sy:updateFrequency>
			<item>
		<title>Blue Screen of Death STOP error Windows XP</title>
		<link>http://www.techvts.com/security/blue-screen-of-death-stop-error-windows-xp/</link>
		<comments>http://www.techvts.com/security/blue-screen-of-death-stop-error-windows-xp/#comments</comments>
		<pubDate>Mon, 17 May 2010 17:10:22 +0000</pubDate>
		<dc:creator>admin</dc:creator>
				<category><![CDATA[3:Virus Removal]]></category>
		<category><![CDATA[blue screen]]></category>
		<category><![CDATA[error]]></category>
		<category><![CDATA[windows xp]]></category>

		<guid isPermaLink="false">http://www.techvts.com/security/?p=425</guid>
		<description><![CDATA[



Windows XP Blue  Screen of Death STOP Codes
I have been seeing quite a few posts regarding the dreaded Blue Screen of Death,  and what the STOP codes mean. This is a fairly extensive list of the most common  stop errors, their corrasponding codes, and recommended solutions.
When Windows XP detects a problem from [...]]]></description>
		<wfw:commentRss>http://www.techvts.com/security/blue-screen-of-death-stop-error-windows-xp/feed/</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>Worm Win32 Rebhip.A removal</title>
		<link>http://www.techvts.com/security/worm-win32-rebhip-a-removal/</link>
		<comments>http://www.techvts.com/security/worm-win32-rebhip-a-removal/#comments</comments>
		<pubDate>Mon, 17 May 2010 06:04:00 +0000</pubDate>
		<dc:creator>admin</dc:creator>
				<category><![CDATA[3:Virus Removal]]></category>
		<category><![CDATA[rebhip]]></category>
		<category><![CDATA[win32]]></category>
		<category><![CDATA[worm]]></category>

		<guid isPermaLink="false">http://www.techvts.com/security/?p=419</guid>
		<description><![CDATA[



Worm:Win32/Rebhip.A
Aliases:
Trojan.Win32.Llac.aaf (Kaspersky)
Win32/Spatet.A (ESET)
Trj/Spy.YM (Panda)
Alert Level :
Severe
Antimalware protection details:
Microsoft recommends that you download the latest definitions to get protected.
Summary
Worm:Win32/Rebhip.A is a worm that spreads via removable drives and attempts to steal sensitive information from an affected computer.
System changes
The following system changes may indicate the presence of this malware:
•The presence of the following files:
\WinDefence\windefence32.exe
C:\Documents and Settings\\Local Settings\Temp\uuu.uuu
C:\Documents [...]]]></description>
		<wfw:commentRss>http://www.techvts.com/security/worm-win32-rebhip-a-removal/feed/</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>Recycler virus autorun-inf file removal</title>
		<link>http://www.techvts.com/security/recycler-virus-autorun-inf-file-removal/</link>
		<comments>http://www.techvts.com/security/recycler-virus-autorun-inf-file-removal/#comments</comments>
		<pubDate>Mon, 15 Feb 2010 05:56:40 +0000</pubDate>
		<dc:creator>admin</dc:creator>
				<category><![CDATA[3:Virus Removal]]></category>
		<category><![CDATA[!inf]]></category>
		<category><![CDATA[autorun]]></category>
		<category><![CDATA[recycler]]></category>
		<category><![CDATA[usb]]></category>
		<category><![CDATA[virus]]></category>

		<guid isPermaLink="false">http://www.techvts.com/security/?p=337</guid>
		<description><![CDATA[



Recycler virus
is a virus that exploits the autorun feature of Windows. It copies the autorun.inf files on each drive of the computer, be it permanent or a removable media such as DVDs, CD ROMs, USB Devices, or Memory Sticks. The recycler virus originated from the W32.Lecna.H worm that spreads itself by copying itself to all [...]]]></description>
		<wfw:commentRss>http://www.techvts.com/security/recycler-virus-autorun-inf-file-removal/feed/</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>Win32 Netsky worm removal guide</title>
		<link>http://www.techvts.com/security/win32-netsky-worm-removal-guide/</link>
		<comments>http://www.techvts.com/security/win32-netsky-worm-removal-guide/#comments</comments>
		<pubDate>Mon, 04 Jan 2010 10:20:13 +0000</pubDate>
		<dc:creator>admin</dc:creator>
				<category><![CDATA[3:Virus Removal]]></category>
		<category><![CDATA[netsky]]></category>
		<category><![CDATA[win32]]></category>
		<category><![CDATA[worm]]></category>

		<guid isPermaLink="false">http://www.techvts.com/security/?p=294</guid>
		<description><![CDATA[



Remove Worm win32 netsky
Worm.Win32.Netsky is a parasite that has returned recently in the popup warning messages claiming that your system has been hijacked and infected with this dangerous Worm infection. This fake alert is generated by a Trojan program that creeps into the system bundled with Active-X plug-ins related to fake video codecs. Once executed, [...]]]></description>
		<wfw:commentRss>http://www.techvts.com/security/win32-netsky-worm-removal-guide/feed/</wfw:commentRss>
		<slash:comments>1</slash:comments>
		</item>
		<item>
		<title>Worm win32 Neeris gen.c removal</title>
		<link>http://www.techvts.com/security/worm-win32-neeris-gen-c-removal/</link>
		<comments>http://www.techvts.com/security/worm-win32-neeris-gen-c-removal/#comments</comments>
		<pubDate>Wed, 05 Aug 2009 06:34:40 +0000</pubDate>
		<dc:creator>admin</dc:creator>
				<category><![CDATA[3:Virus Removal]]></category>
		<category><![CDATA[gen.c]]></category>
		<category><![CDATA[neeris]]></category>
		<category><![CDATA[win32]]></category>
		<category><![CDATA[worm]]></category>

		<guid isPermaLink="false">http://www.techvts.com/security/?p=224</guid>
		<description><![CDATA[



Remove Neeris.Worm.gen!c
Worm:Win32/Neeris.gen!C is the generic detection for a member of the Win32/Neeris family of worms. These worms spread via MNS Messenger and may contain backdoor functionalities. New variants of this worm may exploit a vulnerability in the Windows Server Service (srvsvc) in computers that have not yet applied http://www.microsoft.com/technet/security/Bulletin/MS08-067.mspx Microsoft Security Bulletin MS08-067.
Also Known As:
Win32/Neeris.worm.101376 [...]]]></description>
		<wfw:commentRss>http://www.techvts.com/security/worm-win32-neeris-gen-c-removal/feed/</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>Remove win32 mabezat.b worm</title>
		<link>http://www.techvts.com/security/remove-win32-mabezat-b-worm/</link>
		<comments>http://www.techvts.com/security/remove-win32-mabezat-b-worm/#comments</comments>
		<pubDate>Wed, 05 Aug 2009 06:30:41 +0000</pubDate>
		<dc:creator>admin</dc:creator>
				<category><![CDATA[3:Virus Removal]]></category>
		<category><![CDATA[autoru.apz]]></category>
		<category><![CDATA[mabezat]]></category>
		<category><![CDATA[win32]]></category>
		<category><![CDATA[worm]]></category>

		<guid isPermaLink="false">http://www.techvts.com/security/?p=222</guid>
		<description><![CDATA[



Remove Mabezat.b.Worm.c
Virus:Win32/Mabezat.B is a polymorphic virus that infects PE files. Apart from spreading via file infection, it also attempts to spread via network shares, removable drives and by CD-burning. It contains a date-based payload that encrypts files with particular extensions.
Also Known As:
Win32/Mabezat.worm.32768 (AhnLab)
W32/AutoRun.APZ (Norman)
W32/Mabezat-B (Sophos)
W32.Mabezat-3 (Clam AV)
Win32/Mabezat.A (ESET)
Worm.Win32.Mabezat.b (other)
Worm.Win32.Mabezat.b (Kaspersky)
Win32.Worm.Mabezat.C (Sunbelt Software)
W32/Mabezat.a (McAfee) 
Technical Information
Virus:Win32/Mabezat.B [...]]]></description>
		<wfw:commentRss>http://www.techvts.com/security/remove-win32-mabezat-b-worm/feed/</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>Remove win32 koobface worm</title>
		<link>http://www.techvts.com/security/remove-win32-koobface-worm/</link>
		<comments>http://www.techvts.com/security/remove-win32-koobface-worm/#comments</comments>
		<pubDate>Wed, 05 Aug 2009 06:23:45 +0000</pubDate>
		<dc:creator>admin</dc:creator>
				<category><![CDATA[3:Virus Removal]]></category>
		<category><![CDATA[koobface]]></category>
		<category><![CDATA[malware]]></category>
		<category><![CDATA[virus]]></category>
		<category><![CDATA[win32]]></category>
		<category><![CDATA[worm]]></category>

		<guid isPermaLink="false">http://www.techvts.com/security/?p=220</guid>
		<description><![CDATA[



Removing Win32 KoobFace worm/malware
Win32/Koobface is a multi-component family of malware used to compromise machines and direct them in various ways at the attacker&#8217;s will. This could include using the affected machine to distribute additional malware, generate &#8216;pay per click&#8217; advertising revenue, steal sensitive data, break captchas, and subvert the affected user&#8217;s online experience. Its components [...]]]></description>
		<wfw:commentRss>http://www.techvts.com/security/remove-win32-koobface-worm/feed/</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>Remove win32 sasser worm windows auto shutdown warning time box</title>
		<link>http://www.techvts.com/security/remove-win32-sasser-worm-windows-auto-shutdown-warning-time-box/</link>
		<comments>http://www.techvts.com/security/remove-win32-sasser-worm-windows-auto-shutdown-warning-time-box/#comments</comments>
		<pubDate>Wed, 05 Aug 2009 06:20:53 +0000</pubDate>
		<dc:creator>admin</dc:creator>
				<category><![CDATA[3:Virus Removal]]></category>
		<category><![CDATA[auto]]></category>
		<category><![CDATA[box]]></category>
		<category><![CDATA[sasser]]></category>
		<category><![CDATA[shutdown]]></category>
		<category><![CDATA[time]]></category>
		<category><![CDATA[win32]]></category>
		<category><![CDATA[windows]]></category>
		<category><![CDATA[worm]]></category>

		<guid isPermaLink="false">http://www.techvts.com/security/?p=217</guid>
		<description><![CDATA[



Removing Win32 Sasser.Worm
W32-Sasser Worm
Win32/Sasser is a family of network worms that exploit the Local Security Authority Subsystem Service (LSASS) vulnerability fixed in Microsoft Security Update MS04-011. The worm spreads by randomly scanning IP addresses for vulnerable machines and infecting any that are found. 
Also Known As:
W32/Sasser.worm (McAfee)
W32.Sasser.Worm (Symantec)
WORM_SASSER (Trend Micro)
Win32.Sasser (CA)
Sasser (F-secure)
Sasser (Panda)
W32/Sasser (Sophos)
W32/Sasser (Norman) [...]]]></description>
		<wfw:commentRss>http://www.techvts.com/security/remove-win32-sasser-worm-windows-auto-shutdown-warning-time-box/feed/</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>w32 Sality AE virus removal steps</title>
		<link>http://www.techvts.com/security/w32-sality-ae-virus-removal-steps/</link>
		<comments>http://www.techvts.com/security/w32-sality-ae-virus-removal-steps/#comments</comments>
		<pubDate>Wed, 05 Aug 2009 06:12:08 +0000</pubDate>
		<dc:creator>admin</dc:creator>
				<category><![CDATA[3:Virus Removal]]></category>
		<category><![CDATA[sality]]></category>
		<category><![CDATA[sality.ae]]></category>
		<category><![CDATA[virus]]></category>
		<category><![CDATA[w32]]></category>

		<guid isPermaLink="false">http://www.techvts.com/security/?p=215</guid>
		<description><![CDATA[



Remove Sality.AE
W32/Sality.AESality is a computer virus which will infect any files with extension .exe .com and .scr , sality will use your default share folder to be spread in your network area, besides that sality uses old autorun.inf technique also to spread. Your application will become a little bigger in size around 60kb-80kb after sality [...]]]></description>
		<wfw:commentRss>http://www.techvts.com/security/w32-sality-ae-virus-removal-steps/feed/</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>Remove Microsoft.lnk Shortcut Lik Worm PIF Starter A</title>
		<link>http://www.techvts.com/security/remove-microsoft-lnk-shortcut-lik-worm-pif-starter-a/</link>
		<comments>http://www.techvts.com/security/remove-microsoft-lnk-shortcut-lik-worm-pif-starter-a/#comments</comments>
		<pubDate>Wed, 05 Aug 2009 06:06:27 +0000</pubDate>
		<dc:creator>admin</dc:creator>
				<category><![CDATA[3:Virus Removal]]></category>
		<category><![CDATA[link]]></category>
		<category><![CDATA[microsoft]]></category>
		<category><![CDATA[pif]]></category>
		<category><![CDATA[shortcut]]></category>
		<category><![CDATA[starter]]></category>
		<category><![CDATA[worm]]></category>

		<guid isPermaLink="false">http://www.techvts.com/security/?p=213</guid>
		<description><![CDATA[



Worm Pif Starter.A
To know when your computer infected by this virus there are 4 important points:
In your “My Documents” folder there is file named “database.mdb“.
There is clone folder with extension .lnk maximum 5 first folder arranged by name, rules until second sub folders.
There is files Autorun.inf, Thumb.db, Microsoft.lnk in each root drive and folders, rules [...]]]></description>
		<wfw:commentRss>http://www.techvts.com/security/remove-microsoft-lnk-shortcut-lik-worm-pif-starter-a/feed/</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
	</channel>
</rss>
