Remove Lecivio. Description and removal instructions

 
Title: Lecivio

Type: Worms
Severity scale:Lecivio severity is 47  (47 / 100)
 
Lecivio is a worm that spreads through removable media and mapped network drives. The parasite downloads from the Internet and executes malicious files. It runs as a service on every Windows startup.


Related files: cmdial.exe, dnandlk.exe, goku.exe, inf.exe, rpcss.exe, userinit.exe, viollice.exe, dpnmodempl.dll

Lecivio properties:
• Connects itself to the internet
• Hides from the user
• Stays resident in background

Automatic Lecivio removal:

remover for Lecivio

Lecivio manual removal:

Kill processes:
cmdial.exe, dnandlk.exe, goku.exe, inf.exe, rpcss.exe, userinit.exe, viollice.exe
Delete registry values:
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\dpnmodempl
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\HTTPFilter
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\HTTPSSL
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rpcss
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Userinit=%System%\userinit.exe,%System%\cmdial.exe,%System%\viollice.exe
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\App Paths\rpcss.exe
Delete files:
cmdial.exe, dnandlk.exe, goku.exe, inf.exe, rpcss.exe, userinit.exe, viollice.exe, dpnmodempl.dll
Misc:
Exact file location:
goku.exe - C:
inf.exe - C:\WINDOWS\System32 or C:\WINNT\System32; removable media and mapped network drives
cmdial.exe, dnandlk.exe, rpcss.exe, userinit.exe, viollice.exe, dpnmodempl.dll - C:\WINDOWS\System32 or C:\WINNT\System32

Other programs to remove Lecivio:

• SUPERAntiSpyware - Review - Download
• CounterSpy - Review - Download
• Windows Defender - Review - Download

Information added: 29/05/07
Information updated: 29/05/07

Additional resources related to Lecivio:

Attention: If you know or you have a website or page about Lecivio removal, feel free to add a link to this list: add url




more resources

Post Comment:

Attention: Use this form only if you have additional information about Lecivio parasite, its removal instructions, additional resources or behavior. By clicking "post comment" button you agree not to post any copyrighted, unlawful, harmful, threatening, abusive, harassing, defamatory, vulgar, obscene, profane, hateful, racially, ethnically or otherwise objectionable material of any kind.



Enter security code:

Latest spyware news:
Similar parasites: