Remove W32.Holar

What is W32.Holar and removal instructions

This worm uses Outlook to send out copies of itself as an attachment in email to all the recepients in the Outlook address book. This email contains no message and has a variable subject, which is also the filename of the attached malware copy. The email attachment uses the file extension, PIF.

W32.Holar manual removal:

Delete registry values:
Browse to the key:
'HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\RunServices'
Delete the values 'ZaCker C:\%System%\' and 'MyLife C:\%System%\CmdServ.exe'
Delete subkeys:
'HKEY_LOCAL_MACHINE\Software\Microsoft\HolyWar'
'HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\HolyWar'

Related Spyware Removal

W32.Welchia.Worm
Wast
Waster Trojan
WatcHeador Trojan
Watcher
Watchfull eye
Watching Trojan
Watch Right
Wayphisher
WeatherBug
Warpcom Trojan
WarFair Trojan
Wanda
W32.Yodo
Waar Daat

W32.HLLW.Yodi
W32.HLLW.Repsan
W32.HLLW.Lacon
W32.HLLW.Gaobot.BH
W32.HLLW.Gaobot.AZ
W32.HLLW.Gaobot.AO
W32.HLLW.Gaobot.AA
W32.HLLW.Gaobot
W32.HLLW.Donk.B
W32.HLLW.Darby
W32.HLLW.Cult.H
W32.HLLW.Caspid
W32.Galil.C
W32.Dumaru
W32.Blaster.F.Worm

Previous: W32.Hopalong Next: W32.HLLW.Yodi

| 1-9 | O | P | Q | R | S | T | U | V | W | X | Y | N | M | L | A | B | C | D | E | F | G | H | I | J | K | Z