Remove Miprinc. Description and removal instructions

 
Title: Miprinc

Type: Worms
Severity scale:Miprinc severity is 57  (57 / 100)
 
Miprinc is an Internet worm that spreads by e-mail through messages with infected attachments. It also propagates by copying itself to removable media, local and mapped network drives. Once executed, the parasite secretly installs itself to the system and runs a payload. It infects executable files, disables System Restore, modifies system settings and hides all images, sound and video files it finds. Miprinc also terminates various running programs including security-related applications. It can disable keyboard and mouse input. The worm runs on every Windows startup.


Related files: dnalsi_akgnab.exe, explorer, exe, mr_cf.exe, mutant.exe, negeri serumpun sebalai.pif.bat.com.scr.exe, polymorph1.exe, polymorph2.exe, sahang.exe, sma negeri 1 pangkalpinang.exe, timah.exe, winlogon.exe, [X1].exe, message for my princess.scr, mr_coolface.scr, [X2].scr

Miprinc properties:
• Hides from the user
• Stays resident in background

Automatic Miprinc removal:

remover for Miprinc

Miprinc manual removal:

Kill processes:
dnalsi_akgnab.exe, explorer, exe, mr_cf.exe, mutant.exe, negeri serumpun sebalai.pif.bat.com.scr.exe, polymorph1.exe, polymorph2.exe, sahang.exe, sma negeri 1 pangkalpinang.exe, timah.exe, winlogon.exe, [X1].exe
Delete registry values:
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run\[X]
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\[X]
HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\SystemRestore\DisableConfig=1
HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\SystemRestore\DisableSR=1
Delete files:
dnalsi_akgnab.exe, explorer, exe, mr_cf.exe, mutant.exe, negeri serumpun sebalai.pif.bat.com.scr.exe, polymorph1.exe, polymorph2.exe, sahang.exe, sma negeri 1 pangkalpinang.exe, timah.exe, winlogon.exe, [X1].exe, message for my princess.scr, mr_coolface.scr, [X2].scr
Delete directories:
C:\Documents and Settings\[Current User]\Application Data\Mr_CF
C:\Documents and Settings\[Current User]\Local Settings\Application Data\Mr_CF
Misc:
[X1] and [X2] are random file names.

Exact file location:
[X1].exe, mr_coolface.scr - C:\WINDOWS\System32 or C:\WINNT\System32
negeri serumpun sebalai.pif.bat.com.scr.exe - C:\WINDOWS or C:\WINNT
dnalsi_akgnab.exe - C:\Documents and Settings\[Current User]\Local Settings
message for my princess.scr - C:\Documents and Settings\[Current User]\Desktop
winlogon.exe - C:\Documents and Settings\[Current User]\Start Menu\Programs\Startup
polymorph1.exe, polymorph2.exe - C:\Documents and Settings\[Current User]\Local Settings\Application Data
explorer.exe, mutant.exe, sahang.exe, sma negeri 1 pangkalpinang.exe, timah.exe - C:\Documents and Settings\[Current User]\Application Data
mr_cf.exe - C:\Documents and Settings\[Current User]\Application Data\Mr_CF and C:\Documents and Settings\[Current User]\Local Settings\Application Data\Mr_CF

Other programs to remove Miprinc:

• Malwarebytes Anti Malware - Review - Download
• Malwarebytes Anti Malware - Review - Download
• Windows Defender - Review - Download

Information added: 27/01/07
Information updated: 27/01/07

Additional resources related to Miprinc:

Attention: If you know or you have a website or page about Miprinc removal, feel free to add a link to this list: add url




more resources

Post Comment:

Attention: Use this form only if you have additional information about Miprinc parasite, its removal instructions, additional resources or behavior. By clicking "post comment" button you agree not to post any copyrighted, unlawful, harmful, threatening, abusive, harassing, defamatory, vulgar, obscene, profane, hateful, racially, ethnically or otherwise objectionable material of any kind.



Enter security code:

Latest spyware news:
Similar parasites: