Results 1 to 6 of 6

Thread: How delete Win32.Worm.Stration.BB@mm worm from my laptop?

  1. #1
    Join Date
    Dec 2009
    Posts
    26

    How delete Win32.Worm.Stration.BB@mm worm from my laptop?

    My new Accer laptop is infected with Win32.Worm.Stration.BB@mm, the AVG scan antivirus is detected its presence on my system but it is not removing this worm from my computer. My system is becoming extremely slow. I think this is happening because of this worm. I want to know the deletion method for Win32.Worm.Stration.BB@mm from my system. My operating system is window 7. I will be waiting for any related reply.

  2. #2
    Join Date
    Feb 2008
    Posts
    2,635

    Re: Win32.Worm.Stration.BB@mm keeps self replicating

    Normally worms like Win32.Worm.Stration.BB@mm keeps self replicating and for doing this they use the memory and processing speed of the system. If your antivirus is not deleting this worm from your personal computer than upgrade your antivirus software. After upgrading your antivirus software scan your system and remove this worm from your laptop. If this does not solves your problem then down load any other antivirus software, for removing this worm from your laptop.

  3. #3
    Join Date
    May 2008
    Posts
    2,945

    Re: Restore your system.

    Actually this worm self replicate and hides its copies in your system that is the reason that your antivirus program is not able to delete this worm from your laptop. May be system restore help you to get rid of this worm problem? For restoring the system follow these steps. Goto start > programs > accessories > System tools > select system restore. Then you will see a system restore window where you have to select the date for system restore. Reboot your computer and your system will be restored.

  4. #4
    Join Date
    Jan 2006
    Posts
    3,792

    Re: Technical details related to Win32.Worm.Stration.BB@mm

    Try to understand the technical details of this worm this may help you to remove this worm from your computer.
    This threat arrives via e-mail. The format of the e-mail is as follows:

    Subject: (any of the following)

    Error, Good day, hello, Mail Delivery System, Mail server report, Mail Transaction Failed, picture, Server , Report, Status etc.

    Body:

    The message cannot be represented in 7-bit ASCII encoding
    and has been sent as a binary attachment


    Attachment:
    The attachment has different formats. It is either:

    Update-KB<%random%>-x86.exe or Update-KB<%random%>-x86.zip

    (eg: Update-KB8328-x86.exe)


    Once the attachment has been run, the worm opens a Notepad window
    containing garbage, creates the aforementioned files and registry keys
    (see Symptoms) and starts searching for e-mail addresses which will be
    stored in file SERV.WAX

    It has a list of urls from which it attempts to download an update. If a file
    is present on any of those urls the worm downloads and executes it.

    Once the e-mail harvesting is done, it attempts to send itself to those e-mail addresses.

  5. #5
    Join Date
    Apr 2008
    Posts
    3,339

    Re: Removal method for this worm

    For removing this worm from your computer.
    Step1: Terminate the “serv.exe” process
    Step2: Delete the file “serv.exe”
    Step3: Delete the following registry files.
    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
    "serv"="C:\\%WINDOWS%\\serv.exe s"

    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows]
    "AppInit_DLLs"=" dmdlmsvf.dll e1.dll"

    Step 4: Delete e1.dll and for doing this you have to terminate the explorer.exe in task manager and again restart the explorer task.

  6. #6
    Join Date
    May 2008
    Posts
    3,516

    Re: Preventive measures

    Manually deleting the virus or by using antivirus software this worm can be eradicated. After removing this worm from your laptop you must follow some of the preventive measures. Such as upgrade your antivirus software and regularly scan your system with the antivirus. Enable firewall on your system and use strong password for your system. Upgrade all the software you are using on your laptop.

Similar Threads

  1. Help to delete Win32.Worm.VB.NXY
    By Steyn in forum Networking & Security
    Replies: 4
    Last Post: 31-01-2010, 02:34 AM
  2. How to delete Win32/Bagle.HE worm?
    By Harper 21 in forum Networking & Security
    Replies: 5
    Last Post: 30-12-2009, 09:01 AM
  3. How to delete Win32.Worm.Korgo.A,B?
    By DEWITT in forum Networking & Security
    Replies: 5
    Last Post: 22-12-2009, 05:42 AM
  4. How to delete Win32.Worm.Bobax.A/C?
    By CAROLG in forum Networking & Security
    Replies: 5
    Last Post: 22-12-2009, 04:47 AM
  5. How to delete Win32.Worm.Sasser.{A-C}
    By DEWITT in forum Networking & Security
    Replies: 5
    Last Post: 22-12-2009, 04:02 AM

Tags for this Thread

Bookmarks

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •  
Page generated in 1,713,462,286.14673 seconds with 17 queries