Home Blog

W32.Murtinda Removal Instruction – Effective Way to Wipe off W32.Murtinda

Posted by in Blog Worm
on December 28th, 2012 | Leave a comment

W32.Murtinda is classified as worm virus that can generate lots of variants or copies of itself on the compromised computer. The worm will scan for removable device and once a new device is connected to the computer the worm will drop a copy of itself to the device. W32.Murtinda uses windows autorun feature to allow itself to run at windows startup automatically. The worm has ability to kill certain processes so as to prevent itself from being removed easily. Usually, spam emails, p2p software and messenger program are the common way the worm gets into a computer. When you use the above mentioned tool to send a file, the worm can infect the file and then access more computers. Do you want to remove W32.Murtinda instantly?

Technical details
If you want to use manual way to get rid of W32.Murtinda, the following information will help you a great deal. The difficulty that lies in manual way is to find out malicious files and registry entries. Experts have found out those files and registry entries, so what you need to figure out is how to remove them.
1. W32.Murtinda files

%ProgramFiles%\avupdate.exe
%SystemDrive%\av.sys
%ProgramFiles%\run.ini

2. W32.Murtinda registry entries

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\Folder\Hidden\SHOWALL\”CheckedValue” = “0″
HKEY_CURRENT_USER\Software\Microsoft\C0d3R\”C0d3R__INFO” = “hey sniffer just testing with autoit,i do not use autorun feature this time but use some Social Eng.lets c how much success i get,and my targets are two crap appz and avira as by you know by the time what i mean”
HKEY_CURRENT_USER\Software\Microsoft\”C0d3R” = “MADE IN INDIA.@AzUtRuM@”
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced\”HideFileExt” = “1″
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\”Anti-Virus Update” = “%ProgramFiles%\avupdate.exe”
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\”CleanShutdown” = “0″

How to remove W32.Murtinda effectively
Most users prefer a simple and safe way to get rid of the worm, so using an advanced virus removal program is your best choice. A virus removal program has the ability to stop the worm from executing, removing malicious files and deleting related registry items. The complex removal will become automatic with the help of a W32.Murtinda removal program.

Do you have an antivirus program that can remove the worm and protect your computer? If you do not have now, download and install Spyware Cease to your pc. This antispyware program can remove various pc threats including W32.Murtinda effectively and protect the computer in real-time.

Leave a Reply