wkfxi.js - Dangerous
%windir%\wkfxi.js
Manual removal instructions:
Antivirus Report of %windir%\wkfxi.js:
%windir%\wkfxi.js
JS.Speth.Worm
It is a Java Script file that copies itself throughout the C drive of the infected computer. It overwrites Autoexec.bat, as well as .vbs and .cmd files. The worm contains a mass-mailing routine and can also spread via mIRC, Pirch98, and vIRC.
Overwrites Autoexec.bat so that %Windir%\wigun.js is executed.
Copies itself to various folders.
Creates lpmvh.vbs, which is a mass-mailing routine.
Adds the value:
"stmha" = "%Windir%\wkfxi.js"
to Windows startup registry keys.
Sends itself by e-mail.
Use RegRun Startup Optimizer to remove it from startup.
Delete the worm's files from hard disk.
%windir%\wkfxi.js | Malware |
%windir%\wkfxi.js | Dangerous |
%windir%\wkfxi.js | High Risk |
It is a Java Script file that copies itself throughout the C drive of the infected computer. It overwrites Autoexec.bat, as well as .vbs and .cmd files. The worm contains a mass-mailing routine and can also spread via mIRC, Pirch98, and vIRC.
Overwrites Autoexec.bat so that %Windir%\wigun.js is executed.
Copies itself to various folders.
Creates lpmvh.vbs, which is a mass-mailing routine.
Adds the value:
"stmha" = "%Windir%\wkfxi.js"
to Windows startup registry keys.
Sends itself by e-mail.
Use RegRun Startup Optimizer to remove it from startup.
Delete the worm's files from hard disk.
Dmitry Sokolov:
I created UnHackMe in 2006 to fix the problem that antivioruses did not fix: detecting rootkits.
Since that time I work every day to fix the issues that antiviruses cannot.
If your antivirus have not helped you solve the problem, you should try UnHackMe.
We are a small company and you can ask me directly, if you have any questions.