Home Blog

How to Remove Worm:Win32/Dorkbot.I from Your PC

Posted by in Blog Worm
on December 5th, 2012 | Leave a comment

Worm:Win32/Dorkbot.I is a worm virus like Worm.Win32.Fipp.a. Like most of worms, it can access a target computer via instant messengers, removable drives, network shared files, spam emails as well as social network like facebook. The worm can steal information. Worm:Win32/Dorkbot.I will record user names, passwords, keystrokes and screenshot to a file and then send the file to a remote server. Hacker will analyze the file and sort out useful information that can be used to steal account and displays advertisement. When the worm detects you are going to visit a website related to security program, it will block the websites. To prevent itself from being removed completely, Worm:Win32/Dorkbot.I will store copies of itself. When the computer boots up, a copy of the worm will run automatically.

Is your computer infected by the worm? Such infection will slow down the computer obviously especially when it infects files and deliver data. To get rid of the worm, we have two solutions.

Method one: remove Worm:Win32/Dorkbot.I manually
We have found out files and registry entries created by the worm. If you can clear up all traces, you can get rid of the worm manually. However, manual way is not recommended because when users make some mistakes the computer may be damaged.
1. Open task manager and end processes
2. Remove Worm:Win32/Dorkbot.I files

facebook-pic00[RANDOM CHARACTERS].exe
facebook-profile-pic-[RANDOM NUMBERS]-JPEG.exe
skype__foto.exe, where is the day, month, and year, for example, “skype_09-10-2012_image.exe”
skype__foto.exe, where is the day, month, and year, for example, “skype_06102012_foto.exe”

3. Remove Worm:Win32/Dorkbot.I registry entries

HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run “” = “%AppData%\.exe”HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run “ozkqke” = “%AppData%\ozkqke.exe”

Method two: a virus removal program
If you want to remove the worm safely without damaging any data and settings, you should use a professional virus removal program, which is designed to wipe off various infections. Software can simplify complicated processes into automatic processes. What you need to do is to find an effective Worm:Win32/Dorkbot.I removal program and install it to scan the computer thoroughly. For example, Spyware Cease is one of the effective virus removal programs that are widely used by pc technicians. When your computer is sent to a repair store for virus infection, it will be scanned by programs like Spyware Cease first. You do not have to be an pc expert and you can get rid of Worm:Win32/Dorkbot.I easily with the help of an advanced virus removal program.

Leave a Reply