Remove Quatim. Description and removal instructions

 
Title: Quatim

Type: Worms
Severity scale:Quatim severity is 55  (55 / 100)
 
Quatim is an Internet worm that uses the Yahoo! Messenger program to spread through instant messages containing malicious links, which, once clicked, install the parasite. Once Quatim is installed, it runs a spreading routine and a payload. The worm disables the Registry Editor and the Task Manager, changes the Internet Explorer default home page and modifies Yahoo! Messenger settings. The parasite runs on every Windows startup.


Related files: yahoo.exe

Quatim properties:
• Hides from the user
• Stays resident in background

Automatic Quatim removal:

remover for Quatim

Quatim manual removal:

Kill processes:
yahoo.exe
Delete registry values:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\Task Manager
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\System\DisableRegistryTools=1
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\System\DisableTaskMgr=1
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main\Start Page=[X]
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main\Window Title=[X]
HKEY_CURRENT_USER\Software\Yahoo\Pager\View\YMSGR_buzz\Content URL=[X]
HKEY_CURRENT_USER\Software\Yahoo\pager\View\YMSGR_Launchcast\Content URL=[X]
Delete files:
yahoo.exe
Misc:
[X] is an address of a web site on the atangtraitim.us.tf domain.

The yahoo.exe file can be found in default system directory, which is one of the following: C:\Windows\System, C:\Windows\System32, C:\Winnt\System32.

Other programs to remove Quatim:

• SUPERAntiSpyware - Review - Download
• CounterSpy - Review - Download
• Windows Defender - Review - Download

Information added: 06/10/06
Information updated: 06/10/06

Additional resources related to Quatim:

Attention: If you know or you have a website or page about Quatim removal, feel free to add a link to this list: add url




more resources

Post Comment:

Attention: Use this form only if you have additional information about Quatim parasite, its removal instructions, additional resources or behavior. By clicking "post comment" button you agree not to post any copyrighted, unlawful, harmful, threatening, abusive, harassing, defamatory, vulgar, obscene, profane, hateful, racially, ethnically or otherwise objectionable material of any kind.



Enter security code:

Latest spyware news:
Similar parasites: