winlogon32.bat - Dangerous

winlogon32.bat

Manual removal instructions:

Antivirus Report of winlogon32.bat:
winlogon32.bat Malware
winlogon32.batDangerous
winlogon32.batHigh Risk
winlogon32.bat
BAT.Igador is a batch script worm that spreads using Internet Relay Chat (IRC).
Attempts to end the following processes using the TSKILL utility:
taskmgr; msconfig; ICQ; ICQLite; NISUM; NISSERV; guard; zonealarm; outpost; ad-aware; nmain

Modifies or creates the following files, so that a copy of the worm is sent to other MIRC users:
%ProgramFiles%\mIRC\mirc.ini
%ProgramFiles%\mIRC\eventz.ini

Modifies the %Windir%\Win.ini file so that the worm will run when Windows starts.
Overwrites all .pif files in the %Windir%\System32 folder with a copy of itself.
Deletes all files that have the extension .mp3 in the current folder.

Automatic removal: Use RegRun Startup Optimizer.

Remove winlogon32.bat now!

Dmitry Sokolov:

I created UnHackMe in 2006 to fix the problem that antivioruses did not fix: detecting rootkits.

Since that time I work every day to fix the issues that antiviruses cannot.

If your antivirus have not helped you solve the problem, you should try UnHackMe.

We are a small company and you can ask me directly, if you have any questions.

Testimonials

You can read UnHackMe testimonials here.