Remove Stefanie. Description and removal instructions

 
Title: Stefanie
Also known as: Stefan
Type: Worms
Severity scale:Stefanie severity is 56  (56 / 100)
 
Stefanie, also known as Stefan, is a specific Internet worm written in Visual Basic Script language. It spreads through file sharing networks using popular peer-to-peer applications such as Kazaa, Morpheus, Grokster or BearShare. The parasite attempts to corrupt the system by deleting the Windows Explorer and AIM messenger. It compromises overall system security by disabling essential Windows tools and preventing antivirus programs, firewalls, security-related software and other widely used applications from running. Stefanie also performs annoying actions. It eject the CD-ROM tray, opens a particular web site, reboots or turns off a computer and displays several messages that reveal the worm's presence in the system. The parasite runs on every Windows startup.


Stefanie properties:
• Hides from the user
• Stays resident in background

Automatic Stefanie removal:

remover for Stefanie

Stefanie manual removal:

Delete registry values:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\stefanie
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\systray
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\DisableTaskMgr=1
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\DisallowRun=1
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\DisallowRun\[X]
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Desktop\Components\1\Source=C:\stefanie.html
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Desktop\Components\1\SubscribedURL=C:\stefanie.html
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer\NoClose=1
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer\NoDrives=0x03ffffff
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer\NoFolderOptions=1
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer\NoViewContextMenu=1
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\EmailName=[e-mail address]
HKEY_CURRENT_USER\Software\America Online\AOL Instant Messenger (TM)\CurrentVersion\Login\Scren Name=Free SteFanie
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\RegisteredOwner\[°K°]
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Winlogon\LegalNoticeCaption=[string]
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Winlogon\LegalNoticeText=[string]
Delete files:
windows.cmd, hosts.vbs, startup.vbs, stefanie.vbs, stefanie.html, big boobs.jpg.vbs, hot girl.jpg.vbs, how to rip dvds.doc.vbs, lord of the rings.doc.vbs, pussy.jpg.vbs, sex.jpg.vbs, sex tips.doc.vbs, young.teen.jpg.vbs
Misc:
[X] is a number from 1 to 74.
[e-mail address] is the ilovestefanie@myspace.com address.
[string] is the following line: HAHA You Have The VBS/SteFanie Virus!!! By [°K°]

Infected files big boobs.jpg.vbs, hot girl.jpg.vbs, how to rip dvds.doc.vbs, lord of the rings.doc.vbs, pussy.jpg.vbs, sex.jpg.vbs, sex tips.doc.vbs, young.teen.jpg.vbs are distributed through file sharing networks.

Other programs to remove Stefanie:

• Malwarebytes Anti Malware - Review - Download
• Malwarebytes Anti Malware - Review - Download
• Windows Defender - Review - Download

Information added: 23/09/05
Information updated: 23/09/05

Additional resources related to Stefanie:

Attention: If you know or you have a website or page about Stefanie removal, feel free to add a link to this list: add url




more resources

Post Comment:

Attention: Use this form only if you have additional information about Stefanie parasite, its removal instructions, additional resources or behavior. By clicking "post comment" button you agree not to post any copyrighted, unlawful, harmful, threatening, abusive, harassing, defamatory, vulgar, obscene, profane, hateful, racially, ethnically or otherwise objectionable material of any kind.



Enter security code:

Latest spyware news:
Similar parasites: