W32/Protori-Fam

Category: Viruses and Spyware Protection available since:16 Mar 2004 00:00:00 (GMT)
Type: Win32 worm Last Updated:28 Mar 2013 00:12:20 (GMT)
Prevalence: No Reports

Download Download our free Virus Removal Tool - Find and remove threats your antivirus missed

Aliases

  • W32/Protoride.worm
  • W32.Protoride.Worm

Affected Operating Systems

Windows

Recovery Instructions:

Please follow the instructions for removing worms.

Renaming the registry editor

  • Using Windows explorer, browse to the Windows folder (usually C:\Windows or C:\Winnt) right-click Regedit.exe and make a copy of it.
  • Rename the copy of Regedit.exe to Regedit.com.
  • At the taskbar, click Start|Run. Type 'Regedit.com' and press Return. The registry editor opens.

You will also need to edit the following registry entry. Please read the warning about editing the registry.

Locate the HKEY_CLASSES_ROOT entry:

Typically an unaltered registry entry will be set to

HKCR\exefile\shell\open\command\(default) = "%1" %*

the altered registry entry will be

HKCR\exefile\shell\open\command\(default) = <path to worm> "%1" %*

delete only the path to the worm. Do not delete anything else.

Close the registry editor.

Check your administrator passwords and review network security.

download Try Sophos products for free
Download now