W32/Winur-C

Please follow the instructions for removing worms.

Please follow the instructions for removing worms.

Windows NT/2000/XP

In Windows NT/2000/XP you will also need to edit the following registry entries. The removal of these entries is optional in Windows 95/98/Me. Please read the warning about editing the registry.

At the taskbar, click Start|Run. Type 'Regedit' and press Return. The registry editor opens.

Before you edit the registry, you should make a backup. On the 'Registry' menu, click 'Export Registry File'. In the 'Export range' panel, click 'All', then save your registry as Backup.

Locate the HKEY_LOCAL_MACHINE entries:

HKLM\Software\Microsoft\Windows\CurrentVersion\Run\Winrun HKLM\Software\Microsoft\Windows\CurrentVersion\Run\Winur

and delete them if they exist.

Each user has a registry area named HKEY_USERS\[code number indicating user]\. For each user locate the entry:

HKU\[code number]\Software\Microsoft\Windows\CurrentVersion\Run\Windir
HKU\[code number]\Software\Microsoft\Windows\CurrentVersion\Run\Sysdir

and delete them if they exist.

Close the registry editor.

W32/Winur-C is a complex worm that targets network shares, peer-to-peer file-sharing utilities and floppy disks.

When executed W32/Winur-C copies itself to the Windows folder with the filename winrun.exe and sets the following registry entries with the path to the copy:

HKLM\Software\Microsoft\Windows\CurrentVersion\Run\Winrun HKLM\Software\Microsoft\Windows\CurrentVersion\Run\Winur HKCU\Software\Microsoft\Windows\CurrentVersion\Run\Windir HKCU\Software\Microsoft\Windows\CurrentVersion\Run\Sysdir

W32/Winur-C also copies itself with the filename .exe to the floppy drive and to the KaZaA and WinMX folders and creates a number of copies in different folders and subfolders using the filename from the current folder.

W32/Winur-C creates a hidden sharedDocs folder in the root folder and sets this as the default share for the KaZaA and WinMX file-sharing utilities.

W32/Winur-C copies itself to the sharedDocs folder using filenames from the current folder and from the following list:

Red alert 2 crack.exe
Red Alert crack.exe
Red alert (all versions!) crack.exe
Sim city 4 crack.exe
Sim city 3 crack.exe
Sim city 2 crack.exe
RTTCW crack(noCD).exe
Wolfenstein Return to the castle crack.exe
Anno 1503 crack.exe
Anno 1503 crack nocd.exe
Tomb Raider 1 2 3 4 5 crack.exe
Rollercoaster Tycoon 2 crack.exe
Rollercoaster Tycoon 1 crack.exe
The Sims crack (all versions!).exe
Splinter Cell crack.exe
Splinter Cell crack nocd.exe
Splinter Cell demo.exe
American Conquest Crack.exe
American Conquest Crack nocd.exe
Robin Hood -Legend of Sherwood- crack noCD.exe
Robin Hood -Legend of Sherwood- crack.exe
Highland Warriors crack.exe
Highland Warriors crack nocd.exe
Frontline Attack -War over Europe - Crack.exe
Stronghold Crusader Crack.exe
Stronghold Crusader Crack noCD.exe
Tomb Raider 3 crack.exe
Medieval - Total War - Crack noCD.exe
Medieval - Total War - Crack.exe
Beach Life Crack.exe
Stuart Little 2 Crack.exe
Harry Potter 1 crack.exe
Harry Potter 2 crack.exe
Harry Potter 1 crack noCD.exe
Harry Potter 2 crack noCD.exe
The elder Scrolls - Morrowind- crack.exe
The first emperor crack.exe
Hitman crack nocd.exe
Norton antivirus crack nocd.exe
Esafe crack nocd.exe
Katja Schuurman nude movie.exe
TMF Tooske sexy nude.exe
Girl having sex nude anal.exe
MS Zoo tycoon crack.exe
Driver 2 crack.exe
Driver crack.exe
Theme park world crack.exe
Theme park crack.exe
Dungeon crack nocd.exe
LiveUpdate crack.exe
LiveUpdate crack(4 ever!).exe
Live Update crack.exe
Sex movie hardcore.exe
Hardcore xxx secret.exe
secret.exe
Hardcore SM spanking movie 001.exe
Girl having sex 001.exe
Nude poser (sex cock).exe
See her pussy.exe
Katja Schuurman nude.exe
Katja Schuurman having sex.exe
Bathroom sex.exe
Voyeur movie.exe
Bumfight (movie).exe
CKY 4.exe
CKY 3.exe
CKY 2.exe
CKY 1.exe
Jackass - Steve O crocodile.exe
Jackass - never shown part.exe
Jackass - The movie(mpeg).exe
Jackass game (be jackass!!).exe
Bush vs Saddam (funny flash movie).exe
Hitman crack.exe
Hitman 2 crack nocd.exe
Hitman 2 crack.exe
The thing crack.exe
The Partners crack.exe
Unreal Tournament 2003 crack noCD.exe
Unreal Tournament 2003 crack.exe
UT 2003 crack.exe
Unreal Tournament crack.exe
Lord of the Rings - The Fellowship of the ring- crack.exe
Lord of the Rings - TTT - crack.exe
Lord Of the ring - The Two Towers - crack.exe
Lord of the rings crack noCD.exe
Combat mission 2 crack.exe
Neocron crack.exe
magix music maker crack noCD.exe
Magix music maker 7 crack noCD.exe
Magix music maker 8 crack noCD.exe
magix crack.exe
Norton Antivirus 2003 crack.exe
Mcafee antivirus 2003 crack.exe
Esafe desktiop Protection crack.exe
Encarta 2003 crack.exe
Encarta 2004 crack.exe
Conflict desert storm crack.exe
Davideo 2 crack.exe
Age of Empires 2 crack.exe
Age of mythology crack.exe
Age of mythology crack noCD.exe
Empire Earth crack.exe
Emergency 2 crack.exe
Emergency 2 crack noCD.exe
Emergency crack.exe
Emergency crack noCD.exe
Free SMS v1.0.exe SMS 4 free.exe
Cable cracker.exe
Cossacks - Back to war- crack.exe
Mafia crack.exe
Car Tycoon crack.exe
World War 3 crack.exe
This is football crack.exe
Anstoss 4 crack.exe
Robin Hood crack.exe
GTA 3 crack.exe
GTA 3 crack noCD.exe
GTA 2 crack.exe
GTA 2 crack noCD.exe
GTA Vice City crack.exe
GTA Vice City crack noCD.exe
Might and Magic 1 crack.exe
Might and Magic 2 crack.exe
Might and Magic 3 crack.exe
Might and Magic 4 crack.exe
Might and Magic 5 crack.exe
Might and Magic 6 crack.exe
Might and Magic 7 crack.exe
Might and Magic 8 crack.exe
Might and Magic 9 crack.exe
Migl.exe
Britney Spears naked.exe
Britney Spears in bath (movie).exe
Britney Spears Blowjob movie.exe
Britney Spears Nipple slip.exe
Britney Spears hardcore xx movie.exe
Britney Spears anal movie.exe
Christina Aguilera movie.exe
Christina Aguilera adult movie.exe
Christina Aguilera having sex(mov).exe
Christina Aguilera sucks cock.exe
Pamela Anderson adult movie.exe
Pamela Anderson and Tommy Lee hardcore holiday movie.exe
Pamela Anderson gets fucked.exe
Pamela Anderson deepthroat.exe
Nikki Cox nude.exe
Nikki cox Playboy session.exe
Nikki Cox sex movie.exe
adult(hardcore sex movie xxx)movie.exe
Kate Winslet adult movie.exe
Idols filmp dvd.exe
Idols voorrondes dvd.exe
Jim (Idols).exe
Idols finale game.exe
Keylogger v1.0.exe
Adult movie.exe
hotmail hacker.exe
Hack hotmail.exe
Anonymous email.exe
Emailbomber.exe
Windows XP crack.exe
Windows XP keygen.exe
Office XP crack.exe
Office Xp keygen.exe
Windows NT crack.exe
Windows NT keygen.exe
Windows ME crack.exe
Windows ME keygen.exe
Windows 98 crack.exe
Windows 98 keygen.exe
Winamp.exe
MSN banner remover.exe
MSN hacker.exe
Password stealer.exe
SubSeven.exe
Hardcore adult xxx asian fuck(movie).exe
Hardest sex ever.exe
Virusscanner.exe
Home Alone 1.exe
Home Alone 2.exe
Home Alone 3.exe
Leonardo di Caprio.exe
Catch me if you can (DVD).exe
Hardest pornmovie ever.exe
Lord of the rings game.exe
South Park flash game.exe
South park 004.exe
South park 046.exe
The Simpsons.exe
Microsoft office XP, Me, 2000, 98, 95 license crack.exe
All Microsoft product license cracker! ( windows me, windows XP, windows 2000, etc.exe
Billy Crwaford movie.exe
Eminem - 8 mile (mpeg).exe
Eminem flash game.exe
Tatjana undressing.exe
Warcraft 3 crack.exe
dr. Dre flash (movie).exe
Virus maker.exe
Virus kit.exe
Website defacer ( deface websites !).exe
sex movie(mov).exe
MSN Messenger PLUS !.exe
AOL Hacker password hacker.exe
ICQ hacker password hacker.exe
Microangelo crack.exe
Max Payne crack.exe
Doom (first shoot em up game).exe
my son and his girlfriend having hot xxx sex 30.exe
anal sex nude bitch whore 32.exe
Dragonball Z game.exe
Chasey Lane adult porn movie (mov) 18+.exe
mature housewife getting fucked 032.exe
Pokemon flash game.exe
P2P.exe
.exe