W32.Daprosy Removal Guide

W32.Daprosy Description

W32.Daprosy is a vicious Worm that steals information such as bank account usernames, passwords and credit card details from your computer and sends it to a hacker. W32.Daprosy contains many malicious components such as an adware component that produces annoying adverts when you connect to the Internet. W32.Daprosy also makes contact with a remote server to log the infection and attempts to install other malware. W32.Daprosy can also easily download malicious trojans that opens network ports and allows hackers to gain unauthorized access to the system. W32.Daprosy should not be given any leeway to take control of your computer, have the threat removed immediately.

Alias: Worm:Win32/Autorun.UD (Microsoft),

W32.Daprosy or W32/Autorun-AMS Automatic Detection (Recommended)

Is your PC infected with W32.Daprosy? To safely & quickly detect W32.Daprosy, we highly recommend you...

Download SpyHunter's* Malware Scanner.

W32.Daprosy Manual Removal Instructions

Backup Reminder: Always be sure to back up your PC before making any changes.

Step 1 : Use Windows Task Manager to Remove W32.Daprosy Processes

Remove the "W32.Daprosy" processes files:

c:\Classified.exe
%System%\nthlpsvc1.exe
%System%\npp.exe
%System%\mui.exe
%System%\MsDtc.exe
%System%\Macromed.exe
%System%\inetsrv.exe
%System%\IME.exe
%System%\icsxml.exe
%System%\ias.exe
%System%\export.exe
%System%\drivers.exe
%System%\DirectX.exe
%System%\dhcp.exe
%System%\config.exe
%System%\Com.exe
%System%\Classified.exe
%System%\CatRoot2.exe
%System%\CatRoot.exe
%System%\3com_dmi.exe
%System%\3076.exe
%System%\2052.exe
%System%\1054.exe
%System%\1042.exe
%System%\1041.exe
%System%\1037.exe
%System%\1033.exe
%System%\1031.exe
%System%\1028.exe
%System%\1025.exe
%Windir%\system.exe
%Windir%\srchasst.exe
%Windir%\SoftwareDistribution.exe
%Windir%\security.exe
%Windir%\Resources.exe
%Windir%\repair.exe
%Windir%\Registration.exe
%Windir%\Provisioning.exe
%Windir%\Prefetch.exe
%Windir%\PeerNet.exe
%Windir%\pchealth.exe
%Windir%\Offline Web Pages.exe
%Windir%\mui.exe
%Windir%\msapps.exe
%Windir%\msagent.exe
%Windir%\Microsoft.NET.exe
%Windir%\Media.exe
%Windir%\lsass.exe
%Windir%\java.exe
%Windir%\ime.exe
%Windir%\Help.exe
%Windir%\ehome.exe
%Windir%\Driver Cache.exe
%Windir%\dns.exe
%Windir%\Debug.exe
%Windir%\Cursors.exe
%Windir%\Connection Wizard.exe
%Windir%\Config.exe
%Windir%\Classified.exe
%Windir%\Cache.exe
%Windir%\AppPatch.exe
%Windir%\addins.exe
c:\Read1st!.exe
c:\Program Files.exe
%ProgramFiles%\xerox.exe
%ProgramFiles%\WinPcap.exe
%ProgramFiles%\Windows NT.exe
%ProgramFiles%\Windows Media Player.exe
%ProgramFiles%\Web Publish.exe
%ProgramFiles%\VMware.exe
%ProgramFiles%\Outlook Express.exe
%ProgramFiles%\Online Services.exe
%ProgramFiles%\NetMeeting.exe
%ProgramFiles%\MSN.exe
%ProgramFiles%\MSN Gaming Zone.exe
%ProgramFiles%\Movie Maker.exe
%ProgramFiles%\microsoft frontpage.exe
%ProgramFiles%\Messenger.exe
%ProgramFiles%\Internet Explorer.exe
%ProgramFiles%\ComPlus Applications.exe
%ProgramFiles%\Common Files.exe
%ProgramFiles%\Classified.exe
%ProgramFiles%\Adobe.exe
c:\Inetpub.exe
c:\Documents and Settings.exe
%MyDocuments%\My Pictures.exe
%MyDocuments%\My Music.exe
%MyDocuments%\My eBooks.exe
%MyDocuments%\Classified.exe
%CommonPrograms%\Startup\Classified.exe
%CommonDocuments%\My Videos.exe
%CommonDocuments%\My Pictures.exe
%CommonDocuments%\My Music.exe
%CommonDocuments%\Classified.exe
%CommonDocuments%\classified\Classified.exe
%CommonDesktopDir%\Classified.exe
%CommonDesktopDir%\classified\Classified.exe
%CommonAppData%\Zilch.InfiniSoft\dirlock.exe
%CommonAppData%\Microsoft\KBDriver\kbdsys.exe
%CommonAppData%\Microsoft\KBDriver\Classified.exe

Step 2 : Use Registry Editor to Remove W32.Daprosy Registry Values

Locate and delete "W32.Daprosy" registry entries:

Read more on How to Remove W32.Daprosy Registry Entries

Step 3 : Use Windows Command Prompt to Unregister W32.Daprosy DLL Files

Search and unregister "W32.Daprosy" DLL files:

Read more on How to Remove W32.Daprosy DLL Files

Step 4 : Detect and Delete Other W32.Daprosy Files

Remove the "W32.Daprosy" processes files:

c:\autorun.inf 
c:\Classified.exe
%Windir%\shutdown.dll
%System%\Restore\MachineGuid.txt
%System%\nthlpsvc1.exe
%System%\npp.exe
%System%\mui.exe
%System%\MsDtc.exe
%System%\Macromed.exe
%System%\inetsrv.exe
%System%\IME.exe
%System%\icsxml.exe
%System%\ias.exe
%System%\export.exe
%System%\drivers.exe
%System%\DirectX.exe
%System%\dhcp.exe
%System%\config.exe
%System%\Com.exe
%System%\Classified.exe
%System%\CatRoot2.exe
%System%\CatRoot.exe
%System%\3com_dmi.exe
%System%\3076.exe
%System%\2052.exe
%System%\1054.exe
%System%\1042.exe
%System%\1041.exe
%System%\1037.exe
%System%\1033.exe
%System%\1031.exe
%System%\1028.exe
%System%\1025.exe
%Windir%\system.exe
%Windir%\srchasst.exe
%Windir%\SoftwareDistribution.exe
%Windir%\security.exe
%Windir%\Resources.exe
%Windir%\repair.exe
%Windir%\Registration.exe
%Windir%\Provisioning.exe
%Windir%\Prefetch.exe
%Windir%\PeerNet.exe
%Windir%\pchealth.exe
%Windir%\Offline Web Pages.exe
%Windir%\mui.exe
%Windir%\msapps.exe
%Windir%\msagent.exe
%Windir%\Microsoft.NET.exe
%Windir%\Media.exe
%Windir%\lsass.exe
%Windir%\java.exe
%Windir%\ime.exe
%Windir%\Help.exe
%Windir%\ehome.exe
%Windir%\Driver Cache.exe
%Windir%\dns.exe
%Windir%\Debug.exe
%Windir%\Cursors.exe
%Windir%\Connection Wizard.exe
%Windir%\Config.exe
%Windir%\Classified.exe
%Windir%\Cache.exe
%Windir%\AppPatch.exe
%Windir%\addins.exe
c:\Read1st!.exe
c:\Program Files.exe
%ProgramFiles%\xerox.exe
%ProgramFiles%\WinPcap.exe
%ProgramFiles%\Windows NT.exe
%ProgramFiles%\Windows Media Player.exe
%ProgramFiles%\Web Publish.exe
%ProgramFiles%\VMware.exe
%ProgramFiles%\Outlook Express.exe
%ProgramFiles%\Online Services.exe
%ProgramFiles%\NetMeeting.exe
%ProgramFiles%\MSN.exe
%ProgramFiles%\MSN Gaming Zone.exe
%ProgramFiles%\Movie Maker.exe
%ProgramFiles%\microsoft frontpage.exe
%ProgramFiles%\Messenger.exe
%ProgramFiles%\Internet Explorer.exe
%ProgramFiles%\ComPlus Applications.exe
%ProgramFiles%\Common Files.exe
%ProgramFiles%\Classified.exe
%ProgramFiles%\Adobe.exe
c:\Inetpub.exe
c:\Documents and Settings.exe
%MyDocuments%\My Pictures.exe
%MyDocuments%\My Music.exe
%MyDocuments%\My eBooks.exe
%MyDocuments%\Classified.exe
%CommonPrograms%\Startup\Classified.exe
%CommonDocuments%\My Videos.exe
%CommonDocuments%\My Pictures.exe
%CommonDocuments%\My Music.exe
%CommonDocuments%\Classified.exe
%CommonDocuments%\classified\Classified.exe
%CommonDesktopDir%\Classified.exe
%CommonDesktopDir%\classified\Classified.exe
%CommonAppData%\Zilch.InfiniSoft\dirlock.exe
%CommonAppData%\Microsoft\KBDriver\kbdsys.exe
%CommonAppData%\Microsoft\KBDriver\Classified.exe

Site Disclaimer

Publication Date: Thu Nov 12 2009 03:42:54 EST

User Comments

There are no comments posted for this page.

RECOMMENDED

Top Parasite Threats

Recent Parasite Threats

Resources and Tools

Recent Articles

Subscribe To