|
What is Mespam and removal instructions
Mespam is a trojan that spams instant messages containing malicious links out through AIM, Yahoo! Messenger and Google Talk applications. The parasite registers itself as a layered service provider (LSP) in order to run every time the network connection is present.
Mespam manual removal: Delete registry values: HKEY_LOCAL_MACHINE\SOFTWARE\WinSock2\Buibert
HKLM\SOFTWARE\WinSock2\rsv\
HKLM\SYSTEM\ControlSet001\Services\WS2IFSL\
Unregister DLLs: rvsp32_2.dll
Delete files: aimsmx.dll aosmx.dll gtalsmx.dll rvsp32_2.dll sporder.dll ymsgsmx.dll pfxzmtaim.dll pfxzmtforum.dll pfxzmtgtal.dll pfxzmticq.dll pfxzmtsmt.dll pfxzmtsmtspm.dll pfxzmtwbmail.dll pfxzmtymsg.dll rsvp32_2.dll
Misc: All Mespam files reside in default system directory, which is C:\WINDOWS\System32 or C:\WINNT\System32.
|
|
|
|
|