How to remove W32/Small.KI

Method how to remove W32/Small.KI.: 1.Disconnect the computer from the network (better in "safe mode").

2.If used windows ME/XP, turn off (system restore) in the process of the cleaning.

3.Turn off the process from this virus. You could use Task Manager, turn off 2 processes from this virus that is: update.Exe and winzip.Exe.

4.Removed regsitry key that was changed by the virus. a. ScanRegistry = "scanregw.exe /scan" HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionRun b. change string ShowSuperHidden dengan value 1 HKEY_CURRENT_USERSoftwareMicrosoftWindowsCurrentversionExplorerAdvanced c. change string WebView with value 1 HKEY_CURRENT_USERSoftwareMicrosoftWindowsCurrentversionExplorerAdvanced d. change string FullPatch with value 1 HKEY_CURRENT_USERSoftwareMicrosoftWindowsCurrentVersionExplorerCabinet State e.change string UNCAsIntranet with value 0 HKEY_CURRENT_USERSoftwareMicrosoftWindowsCurrentVersionInternetSettingsZoneMap

5.Remove File who made by the virus. * WINZIP_TMP.exe * C: * Rundll16.exe [hidden file] dan WINZIP_TMP.exe * C:Windows * scanregw.exe [hidden file], update.exe [hidden file], winzip.exe [hidden file] dan sample.Zip * C:WindowsSystem32 * Temp.htt [hidden file] dan WinZip_Tmp.exe [hidden file] * C:Document and settings * C:Documents and SettingsAdministrator * C:Documents and SettingsAdministratorStart Menu * C:Documents and SettingsAdministratorStart MenuPrograms, * C:Documents and SettingsAdministratorStart MenuProgramsStartup * C:Documents and SettingsAll UsersStart Menu * C:Documents and SettingsAll UsersStart MenuPrograms * C:Documents and SettingsAll UsersStart MenuProgramsStartup

6.Removed also file that was made to each folder that in-share with the characteristics: * Icon Concealed [icon Winzip] * fils size 94 KB * Ekstension EXE * Type file "Application"

7.For the cleaning more optimal useantivirus with latest update. 8.Really was suggested to install "antivirus for mail server" (if you had mail server).

aaheroe is a webmaster . For more information visit my site http://www.tsunamiduit.com/blog and http://mp3-player-review.tsunamiduit.com , http://plasma-tv-review.tsunamiduit.com, digital-camera-review.tsunamiduit.com