Remove Posse. Description and removal instructions

Title: Posse
Type: Worms	Severity scale: (45 / 100)

Posse is a worm that spreads through instant messages containing malicious links using the MSN Messenger program. The parasite downloads from the Internet and executes harmful files. It also disables the Task Manager. Posse secretly runs on every Windows startup.

FORUM:
Discuss Posse in
spyware removal forum

Related files: sp2.exe, server.exe, fotos_posse.zip

Posse properties:
• Connects itself to the internet
• Hides from the user
• Stays resident in background

Automatic Posse removal:

remover for Posse

Posse manual removal:

Kill processes:
sp2.exe, server.exe

HELP:
how to kill malicious processes

Delete registry values:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\windowssp2
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\System\DisableTaskmgr=1

HELP:
how to remove registry entries

Delete files:
sp2.exe, server.exe, fotos_posse.zip

HELP:
how to remove harmful files

Misc:
Exact file location:
server.exe, fotos_posse.zip - C:
sp2.exe - C:\WINDOWS\System32 or C:\WINNT\System32

Other programs to remove Posse:

• Malwarebytes Anti Malware - Review - Download
• Malwarebytes Anti Malware - Review - Download
• Windows Defender - Review - Download

Information added: 22/05/07
Information updated: 22/05/07

Additional resources related to Posse:

Attention: If you know or you have a website or page about Posse removal, feel free to add a link to this list: add url

more resources

Post Comment:

Attention: Use this form only if you have additional information about Posse parasite, its removal instructions, additional resources or behavior. By clicking "post comment" button you agree not to post any copyrighted, unlawful, harmful, threatening, abusive, harassing, defamatory, vulgar, obscene, profane, hateful, racially, ethnically or otherwise objectionable material of any kind.