Remove Xitram. Description and removal instructions

 
Title: Xitram

Type: Worms
Severity scale:Xitram severity is 47  (47 / 100)
 
Xitram is an Internet worm that spreads by e-mail through messages with infected attachments. It also propagates by copying itself to local drives and removable media. Once executed, the parasite secretly installs itself to the system and runs a spreading routine. It sends bogus e-mails to addresses gathered from local web (.HTM) files. Xitram does not carry any destructive payload. It runs on every Windows startup.


Related files: nice sex.exe, recycled.exe, reply.exe, Spoolsv.exe, 911.exe, matrix.scr

Xitram properties:
• Hides from the user
• Stays resident in background

Automatic Xitram removal:

remover for Xitram

Xitram manual removal:

Kill processes:
nice sex.exe, recycled.exe, reply.exe, spoolsv.exe, 911.exe
Delete registry values:
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\Run\Task=C:\Documents and Settings\[Current User]\spoolsv.exe
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer\Run\Task=C:\Documents and Settings\[Current User]\spoolsv.exe
HKEY_CURRENT_USER\Control Panel\Desktop\scrnsave.exe=%Windir%\matrix.scr
Delete files:
nice sex.exe, recycled.exe, reply.exe, spoolsv.exe, 911.exe, matrix.scr
Delete directories:
E:\Secret
F:\Fuck
G:\911 Death
H:\VDO
I:\Data Fair
Misc:
The reply.exe file arrives attached to Xitram e-mail messages.

Exact file location:
911.exe - G:\911 Death
matrix.scr - C:\WINDOWS or C:\WINNT
recycled.exe - A:, E:, F:, G:, H:, I:, J:
spoolsv.exe - C:\Documents and Settings\[Current User]
nice sex.exe - E:\Secret, F:\Fuck, H:\VDO, I:\Data Fair, J:
reply.exe - C:\Documents and Settings\[Current User]\Local Settings\Temp

Other programs to remove Xitram:

• SUPERAntiSpyware - Review - Download
• CounterSpy - Review - Download
• Windows Defender - Review - Download

Information added: 26/01/07
Information updated: 22/07/07

Additional resources related to Xitram:

Attention: If you know or you have a website or page about Xitram removal, feel free to add a link to this list: add url




more resources

Post Comment:

Attention: Use this form only if you have additional information about Xitram parasite, its removal instructions, additional resources or behavior. By clicking "post comment" button you agree not to post any copyrighted, unlawful, harmful, threatening, abusive, harassing, defamatory, vulgar, obscene, profane, hateful, racially, ethnically or otherwise objectionable material of any kind.



Enter security code:


Comments from visitors:


1. by Guest. 2007-07-22 03:07:48
very good


Latest spyware news:
Similar parasites: