Friday, January 9, 2009

How to Manually Remove Net Screen Watcher ?

Net Screen Watcher:1. a spyware program2. monitors user activity on the compromised computer3. can capture screenshots of the compromised computer4. also modifies Windows registry5. run each time Windows is startedSolution:
1. Temporarily Turn off System Restore.2. Update the virus definitions.3. Reboot computer in SafeMode (During BootUp process Press F8)4. Run a full system scan and clean/delete all infected file(s)5. Delete/Modify any values added to the registry.
Click Start > Run
Type regedit at the box
Click OK.
Navigate to and delete the following registry entries:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\App Management\ARPCache\Net Screen Watcher ÍøÂçÆÁÄ»¼àÊÓ¹ÜÀí¶Ë ÆóÒµ°æ V1.78 (2008.08.26) wxw.mynsw.cn
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Net Screen Watcher ÍøÂçÆÁÄ»¼àÊÓ¹ÜÀí¶Ë ÆóÒµ°æ V1.78 (2008.08.26) wxw.mynsw.cn
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Net Screen WatcherÓû§¶Ë£¨ÊܼàÊӶˣ© ÆóÒµ°æ For Win98 V1.68 Beta3
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Net Screen WatcherÓû§¶Ë£¨ÊܼàÊӶˣ© ÆóÒµ°æ For Windows Vista V1.68 Beta3
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Net Screen WatcherÓû§¶Ë£¨ÊܼàÊӶˣ© ÆóÒµ°æ For Windows2000/XP/2003 V1.68 (2007.08.03) wxw.mynsw.cn
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Net Screen WatcherÓû§¶Ë£¨ÊܼàÊӶˣ© ÆóÒµ¾«¼ò°æ For Windows2000/XP/2003 V1.68 (2007.11.14) wxw.mynsw.cn
HKEY_LOCAL_MACHINE\SOFTWARE\ZQNSWkey
HKEY_LOCAL_MACHINE\SOFTWARE\ZQkey
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\NSWServer
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\USBSTOR
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\”mynsw” = “C:\Program Files\Net Screen Watcher\wntsrv.exe”
6. Exit registry editor and restart the computer.7. In order to make sure that threat is completely eliminated from your computer, carry out a full scan of your computer using AntiVirus and Antispyware Software.


Add this code


No comments:

Post a Comment

AddThis