How to remove I-Worm.Heffer

Heffer – a computer worm that spreads automatically

Worm Heffer spreads on the Internet by e-mail messages with infected executable attachments, although users might also infect their PCs after inserting a removable drive containing the malicious payload. Once installed, the worm spreads all over the computer, infecting many core system and application files. 

Since removable drives are the main distribution vector of the worm, disabling the autorun function could stop the worm from accessing your computer. However, users never know if the drive is infected in the first place, allowing it spread freely. A robust anti-malware program can stop the malicious payload from being delivered to the computer. We strongly recommend using SpyHunterCombo Cleaner or MalwarebytesMalwarebytes for the Worm Heffer removal process.

On the infected computer, it modifies popular chat programs mIRC and KaZaA peer-to-peer application and spreads through them also. Once per month, it displays several message windows.

The worm can infect some text documents and terminate most processes of antivirus and security-related programs, which can make the elimination process rather difficult. This tactic is often used by malicious programs in order to increase threat persistence.

However, the most up-to-date security software should not be affected by this malware trait. If it is, simply reload your computer in Safe Mode. If you are not sure how to reach it, follow the instructions we provide below. Also, if you notice that your Windows is malfunctioning after you delete the worm, system files were likely compromised. To revert this damage, we strongly recommend using FortectIntego.

Delete the worm and stop the Autorun for better protection

Removable drives are rarely used for malware distribution nowadays, but that does not mean that it does not happen. In order to protect yourself from such an infection method, you should firstly install a powerful anti-malware software which likely to detect and stop the payload before it is executed.

Also, disabling the Autorun function can stop the parasite from spreading. Here's how:

• Right-click on Start and select Settings
• Go to Devices section
• Select AutoPlay on the left side
• Turn the switch to the left to turn the feature off.