Need to remove W32.Changeup.B

[Eber]

Hi everyone, I am having system which is loaded by Windows xp. Several days back I had get infection from virus during surfing on the internet. Then I did scan my system for detection of virus by help of Quick heal total security 2010. However, this is not possible for the Quick heal total security 2010 to delete the W32.Changeup.B virus from my computer. I want some removal solution for this anti virus?

[Steve123]

At the time this virus runs, the virus makes a copies of its own as the given file:

• %SystemDrive%\VIDI\UNUK\DRG.exe

The W32.Changeup.B virus then generate the given file:

• %SystemDrive%\VIDI\UNUK\DesKTop.ini

[Milton.J]

W32.Changeup.B then generates the given file in registry entry so by which it can executes all time Windows starts:

• HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{67KLN5J0-4OPM-01WE-AAX2-5657QCA554112}\"StubPath" = "%SystemDrive%\VIDI\UNUK\DRG.exe"

[Spyrus]

The W32.Changeup.B virus tries to download files through the given below

• network addresses:
• "acc008.homeip.net"
• "acc7hr33.webhop.biz"
• "ogard6.ircdevils.net"

[Big Fish]

The W32.Changeup.B spreads through making a copy of itself to all removable drives as the given below file:

• %DriveLetter%\VIDI\UNUK\DRG.exe

This virus also generates the given below file:

• %DriveLetter%\VIDI\UNUK\DesKTop.ini

The malware generates the given file by which it executes during the above drives are accessed:

• %DriveLetter%\aUtOrUn.inf

[Zachary]

Locate to and remove the given registry entry:

• HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{67KLN5J0-4OPM-01WE-AAX2-5657QCA554112}\"StubPath" = "%SystemDrive%\VIDI\UNUK\DRG.exe"