How to fight the network worms EMail-Worm.Bagle.ca - EMail-Worm.Bagle.dw

 

 

Safety 101: Viruses and solutions

 
 
 

How to fight the network worms EMail-Worm.Bagle.ca - EMail-Worm.Bagle.dw

Back to "Viruses and solutions"
2013 Aug 28 ID: 122
 
 
 
 
E-Mail worms of the Bagle type of the "da" and above versions can unload Kaspersky Anti-Virus 5.0 from the memory if your PC is infected with this worm. To get rid of the worm, do the following:

  • Reboot your PC in Safe Mode
  • go to Start > Run
  • enter regedit in field Open 
  • press the OK button



  • delete in the system registry in the branches links of the following files wiwshost.exe, winshost.exe and firewall_anti.exe (the registry may contain one link of the file only)

    HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run



    HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Run



  • in the system catalogue Windows (windows\system for Windows 9X or windows\system32 for Windows NT/2000/XP) delete the files wiwshost.exe, winshost.exe and firewall_anti.exe (the folder may contain one file only)



  • reboot your PC
  • uninstall previously installed Kaspersky Anti-Virus 5.0
  • reinstall Kaspersky Anti-Virus 5.0
  • update antivirus database
  • make full scan of your computer
  •  
     
     
     
    Was this information helpful?
    Yes No
     

     
     

    Have you found what you were looking for?

    Please let us know how we can make this website more comfortable for you

    Send feedback Send feedback

    Thank you!

    Thank you for submitting your feedback.
    We will review your feedback shortly.