Remove Usbalex. Description and removal instructions

 
Title: Usbalex

Type: Worms
Severity scale:Usbalex severity is 41  (41 / 100)
 
Usbalex is a worm that spreads through floppy disks and mapped network drives. It also creates multiple copies of itself in some local folders and disks. Once executed, the parasite secretly installs itself to the system and starts spreading. Then it attempts to gather some system information and transfer it to its author. Usbalex does not carry any destructive payload. It runs on every Windows startup.


Related files: application.exe, csrss.exe, data.exe, documents.exe, folderdata.exe, girls.exe, lsass.exe, msinfo.exe, mstordb0.exe, my cv.exe, my data.exe, my girls.exe, pictures.exe, recycled.exe, regedit.exe, temp.exe, winlogon.exe, services.reg, tempservices.reg

Usbalex properties:
• Connects itself to the internet
• Hides from the user
• Stays resident in background

Automatic Usbalex removal:

remover for Usbalex

Usbalex manual removal:

Kill processes:
application.exe, csrss.exe, data.exe, documents.exe, folderdata.exe, girls.exe, lsass.exe, msinfo.exe, mstordb0.exe, my cv.exe, my data.exe, my girls.exe, pictures.exe, recycled.exe, regedit.exe, temp.exe, winlogon.exe
Delete registry values:
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\msinfo
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\msinfo
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\tempservices
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\tempservices
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\Run\Default=C:\Documents and Settings\[Current User]\csrss.exe
HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows\Load=C:\Recycler\lsass.exe
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\System=C:\Documents and Settings\[Current User]\csrss.exe
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Userinit=%System%\userinit.exe,C:\Documents and Settings\[Current User]\csrss.exe
Delete files:
application.exe, csrss.exe, data.exe, documents.exe, folderdata.exe, girls.exe, lsass.exe, msinfo.exe, mstordb0.exe, my cv.exe, my data.exe, my girls.exe, pictures.exe, recycled.exe, regedit.exe, temp.exe, winlogon.exe, services.reg, tempservices.reg
Misc:
Exact file location:
data.exe - A:
my cv.exe - J:
recycled.exe - D:
application.exe - I:
girls.exe - H:\Images
lsass.exe - C:\Recycler
my girls.exe - E:\Private
pictures.exe - G:\My Picture
msinfo.exe - C:\Recycler\MsInfo
documents.exe - F:\Data Documents
regedit.exe - C:\WINDOWS\System or C:\WINNT\System
mstordb0.exe - C:\Program Files\Microsoft Office\Office11
csrss.exe, winlogon.exe - C:\Documents and Settings\[Current User]
my data.exe - C:\Documents and Settings\[Current User]\My Documents
folderdata.exe, temp.exe, services.reg, tempservices.reg - C:\WINDOWS\Temp or C:\WINNT\Temp

Other programs to remove Usbalex:

• SUPERAntiSpyware - Review - Download
• CounterSpy - Review - Download
• Windows Defender - Review - Download

Information added: 09/11/06
Information updated: 09/11/06

Additional resources related to Usbalex:

Attention: If you know or you have a website or page about Usbalex removal, feel free to add a link to this list: add url




more resources

Post Comment:

Attention: Use this form only if you have additional information about Usbalex parasite, its removal instructions, additional resources or behavior. By clicking "post comment" button you agree not to post any copyrighted, unlawful, harmful, threatening, abusive, harassing, defamatory, vulgar, obscene, profane, hateful, racially, ethnically or otherwise objectionable material of any kind.



Enter security code:

Latest spyware news:
Similar parasites: