W32/Banuris-B

Please follow the instructions for removing worms.

Windows NT/2000/XP/2003

In Windows NT/2000/XP/2003 you will also need to edit the following registry entries. The removal of these entries is optional in Windows 95/98/Me. Please read the warning about editing the registry.

At the taskbar, click Start|Run. Type 'Regedit' and press Return. The registry editor opens.

Before you edit the registry, you should make a backup. On the 'Registry' menu, click 'Export Registry File'. In the 'Export range' panel, click 'All', then save your registry as Backup.

Locate the HKEY_LOCAL_MACHINE entries:

HKLM\Software\Microsoft\Windows\CurrentVersion\Run\
sysdir = "C:\Winnt\WINRUN.EXE"

HKLM\Software\Microsoft\Windows\CurrentVersion\Run\
windir = "C:\Winnt\WINRUN.EXE"

HKLM\Software\Microsoft\Windows\CurrentVersion\Run\
winrun = "C:\Windows\WINRUN.EXE"

HKLM\Software\Microsoft\Windows\CurrentVersion\Run\
winur = "C:\Winnt\WINRUN.EXE"

and delete them if they exist.

Close the registry editor.

W32/Banuris-B is a peer-to-peer (P2P) worm which may copy itself to the shared
folder of KaZaA and/or KaZaA Lite using one of the following names:

Red alert 2 crack.exe
Red Alert crack.exe
Red alert (all versions!) crack.exe
Sim city 4 crack.exe
Sim city 3 crack.exe
Sim city 2 crack.exe
RTTCW crack(noCD).exe
Anno 1503 crack nocd.exe
Tomb Raider 1 2 3 4 5 crack.exe
Rollercoaster Tycoon 2 crack.exe
Rollercoaster Tycoon 1 crack.exe
The Sims crack (all versions!).exe
Splinter Cell crack.exe
Splinter Cell crack nocd.exe
Splinter Cell demo.exe
American Conquest Crack.exe
American Conquest Crack nocd.exe
Robin Hood -Legend of Sherwood- crack noCD.exe
Robin Hood -Legend of Sherwood- crack.exe
Highland Warriors crack.exe
Highland Warriors crack nocd.exe
Harry Potter 1 crack.exe
Frontline Attack -War over Europe - Crack.exe
Stronghold Crusader Crack.exe
Stronghold Crusader Crack noCD.exe
Tomb Raider 3 crack.exe
Medieval - Total War - Crack noCD.exe
Medieval - Total War - Crack.exe
Beach Life Crack.exe
Stuart Little 2 Crack.exe
Harry Potter 2 crack.exe
Harry Potter 1 crack noCD.exe
Harry Potter 2 crack noCD.exe
The elder Scrolls - Morrowind- crack.exe
The first emperor crack.exe
Hitman crack noicd.exe
Hitman crack.exe
Hitman 2 crack nocd.exe
Hitman 2 crack.exe
The thing crack.exe
The Partners crack.exe
Unreal Tournament 2003 crack noCD.exe
Unreal Tournament 2003 crack.exe
UT 2003 crack.exe
Unreal Tournament crack.exe
Lord of the Rings - The Fellowship of the ring- crack.exe
Lord of the Rings - TTT - crack.exe
Lord Of the ring - The Two Towers - crack.exe
Lord of the rings crack noCD.exe
Combat mission 2 crack.exe
Neocron crack.exe
magix music maker crack noCD.exe
Magix music maker 7 crack noCD.exe
Magix music maker 8 crack noCD.exe
magix crack.exe
Norton Antivirus 2003 crack.exe
Mcafee antivirus 2003 crack.exe
Esafe desktiop Protection crack.exe
Encarta 2003 crack.exe
Encarta 2004 crack.exe
Conflict desert storm crack.exe
Davideo 2 crack.exe
Age of Empires 2 crack.exe
Age of mythology crack.exe
Age of mythology crack noCD.exe
Empire Earth crack.exe
Emergency 2 crack.exe
Emergency 2 crack noCD.exe
Emergency crack.exe
Emergency crack noCD.exe
Free SMS v1.0.exe
SMS 4 free.exe
Cable cracker.exe
Cossacks - Back to war- crack.exe
Mafia crack.exe
Car Tycoon crack.exe
World War 3 crack.exe
This is football crack.exe
Anstoss 4 crack.exe
Robin Hood crack.exe
GTA 3 crack.exe
GTA 3 crack noCD.exe
GTA 2 crack.exe
GTA 2 crack noCD.exe
GTA Vice City crack.exe
GTA Vice City crack noCD.exe
Might and Magic 1 crack.exe
Might and Magic 2 crack.exe
Might and Magic 3 crack.exe
Might and Magic 4 crack.exe
Might and Magic 5 crack.exe
Might and Magic 6 crack.exe
Might and Magic 7 crack.exe
Might and Magic 8 crack.exe
Might and Magic 9 crack.exe
Britney Spears naked.exe
Britney Spears in bath (movie).exe
Britney Spears Blowjob movie.exe
Britney Spears Nipple slip.exe
Britney Spears hardcore xx movie.exe
Britney Spears anal movie.exe
Christina Aguilera movie.exe
Keylogger v1.0.exe
Christina Aguilera adult movie.exe
Christina Aguilera having sex(mov).exe
Christina Aguilera sucks cock.exe
Pamela Anderson adult movie.exe
Pamela Anderson and Tommy Lee hardcore holiday movie.exe
Pamela Anderson gets fucked.exe
Idols finale game.exe
Pamela Anderson deepthroat.exe
Nikki Cox nude.exe
Nikki cox Playboy session.exe
Nikki Cox sex movie.exe
adult(hardcore sex movie xxx)movie.exe
Kate Winslet adult movie.exe
Idols filmp dvd.exe
Idols voorrondes dvd.exe
Jim (Idols).exe
Adult movie.exe
hotmail hacker.exe
Hack hotmail.exe
Anonymous email.exe
Emailbomber.exe
Windows XP crack.exe
Windows XP keygen.exe
Office XP crack.exe
Office Xp keygen.exe
Windows NT crack.exe
Windows NT keygen.exe
Windows ME crack.exe
Windows ME keygen.exe
Windows 98 crack.exe
Windows 98 keygen.exe
Winamp.exe
MSN banner remover.exe
MSN hacker.exe
Password stealer.exe
SubSeven.exe
Hardcore adult xxx asian fuck(movie).exe
Hardest sex ever.exe
Virusscanner.exe

W32/Banuris-B may also copy itself to the Windows folder and create the
following registry entries so that it is executed upon restart:

HKLM\Software\Microsoft\Windows\CurrentVersion\Run\
sysdir = "C:\Winnt\WINRUN.EXE"

HKLM\Software\Microsoft\Windows\CurrentVersion\Run\
windir = "C:\Winnt\WINRUN.EXE"

HKLM\Software\Microsoft\Windows\CurrentVersion\Run\
winrun = "C:\Windows\WINRUN.EXE"

HKLM\Software\Microsoft\Windows\CurrentVersion\Run\
winur = "C:\Winnt\WINRUN.EXE"