Jalabed. How to remove? (Uninstall guide)

removal by Linas Kiguolis - - | Type: Worms
12

Jalabed is a dangerous Internet worm that spreads by e-mail via messages with infected attachments and through chat networks using the mIRC chat program. The user can accidentally infect a computer by running malicious files attached to malicious e-mails or received from other chat users.

Once executed, the parasite installs itself to the system, creates a lot of infected files and runs a spreading routine. It gathers e-mail addresses from the Windows Address Book and sends bogus letters to each of them. Jalabed also alters the mIRC program’s configuration in order to cause it sending malicious files to other chat users. Furthermore, the worm may copy itself to all available network drives.

The worm’s payload is comprised of several harmful functions Jalabed opens a back door that provides the attacker with unauthorized remote access to the compromised computer. The parasite also disables some Windows essential tools and components, changes system settings and blocks access to popular security-related web sites.

Jalabed runs on every Windows startup.

We might be affiliated with any product we recommend on the site. Full disclosure in our Agreement of Use. By Downloading any provided Anti-spyware software to remove Jalabed you agree to our privacy policy and agreement of use.
do it now!
Download
Reimage (remover) Happiness
Guarantee
Download
Reimage (remover) Happiness
Guarantee
Compatible with Microsoft Windows Compatible with OS X
What to do if failed?
If you failed to remove infection using Reimage, submit a question to our support team and provide as much details as possible.
Reimage is recommended to uninstall Jalabed. Free scanner allows you to check whether your PC is infected or not. If you need to remove malware, you have to purchase the licensed version of Reimage malware removal tool.

Note: Manual assistance required means that one or all of removers were unable to remove parasite without some manual intervention, please read manual removal instructions below.

More information about this program can be found in Reimage review.

More information about this program can be found in Reimage review.

Jalabed manual removal:

Kill processes:
arabicstrip.wma.exe,fuckfuckfuck.mpg.exe,fuckmovie.wma.exe,hotmovie.wma.exe,misslebanon.jpg.exe,myfirstsex.wma.exe,nancyajram.exe,sexcaptured.jpg.exe,sexmovie.mpg.exe,sexyarabicgirl.jpg.exe,sexyhaifa.jpg.exe,sexylebanesegirl.jpg.exe,sexynancy.jpg.exe,stolensexvideo.wma.exe

Delete registry values:
HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionRunYa Salam

HKEY_CURRENT_USERSoftwareMicrosoftWindowsCurrentVersionPoliciesSystemDisableRegistryTools=1

HKEY_CURRENT_USERSoftwareMicrosoftWindowsCurrentVersionPoliciesSystemNoAdminPage=1

HKEY_CURRENT_USERSoftwareMicrosoftWindowsCurrentVersionPoliciesExplorerNoDrives=67108863

HKEY_CURRENT_USERSoftwareMicrosoftWindowsCurrentVersionPoliciesExplorerNoRun=1

HKEY_CURRENT_USERSoftwareMicrosoftWindowsCurrentVersionPoliciesWinOldAppDisabled=1

Delete files:
arabicstrip.wma.exe,fuckfuckfuck.mpg.exe,fuckmovie.wma.exe,hotmovie.wma.exe,misslebanon.jpg.exe,myfirstsex.wma.exe,nancyajram.exe,sexcaptured.jpg.exe,sexmovie.mpg.exe,sexyarabicgirl.jpg.exe,sexyhaifa.jpg.exe,sexylebanesegirl.jpg.exe,sexynancy.jpg.exe,stolensexvideo.wma.exe,mailit.vbs,security.vbs,windowsscreen.vbs

Delete directories:
C:dlls

About the author

Linas Kiguolis
Linas Kiguolis - Expert in social media

If this free removal guide helped you and you are satisfied with our service, please consider making a donation to keep this service alive. Even a smallest amount will be appreciated.

More information about the author