Remove W32.Jonbarr.D. Description and removal instructions

Title: W32.Jonbarr.D
Type: Worms	Severity scale: (60 / 100)

W32.Jonbarr.D@mm, which is a variant of the W32.Jonbarr@mm worm, is a worm that uses its own SMTP engine to send itself to all the email addresses it finds in the .htm files and in temporary Internet files. Besides, the worm attempts to kill the processes of various antivirus programs.
The email looks like this:
Subject: 'Microsoft Windows Patch' or 'Re:hya'
From: 'Microsoft'
Reply-To: 'Microsoft'
Message: Please open the attachment if want to get supprise!
Attachment: install.exe

When the attachment is opened, W32.Jonbarr.D@mm displays the message:
Happy Birthday My! Merdeka!

FORUM:
Discuss W32.Jonbarr.D in
spyware removal forum

W32.Jonbarr.D properties:
• Allows remote user connection
• Hides from the user
• Stays resident in background

Automatic W32.Jonbarr.D removal:

remover for W32.Jonbarr.D

W32.Jonbarr.D manual removal:

Delete registry values:
Browse to the key:
'HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run'
Delete the value 'Nero.ma'='%SystemRoot%\system\[two or three random digits].exe'

HELP:
how to remove registry entries

Other programs to remove W32.Jonbarr.D:

• Malwarebytes Anti Malware - Review - Download
• Malwarebytes Anti Malware - Review - Download
• Windows Defender - Review - Download

Information added: 19/03/04
Information updated: 19/05/04

Additional resources related to W32.Jonbarr.D:

Attention: If you know or you have a website or page about W32.Jonbarr.D removal, feel free to add a link to this list: add url

more resources

Post Comment:

Attention: Use this form only if you have additional information about W32.Jonbarr.D parasite, its removal instructions, additional resources or behavior. By clicking "post comment" button you agree not to post any copyrighted, unlawful, harmful, threatening, abusive, harassing, defamatory, vulgar, obscene, profane, hateful, racially, ethnically or otherwise objectionable material of any kind.