How to remove WORM_RONTOKBRO.J worm

[Daniel23]

Sponsored Links

Hi everyone, my system throwing a some error message that your system are infected by WORM_RONTOKBRO.J virus. This making using my internet connection extremely slow. And also this virus also gathering some my important information my system and this collected information are trying to send over the network. I want to remove this virus as soon as possible so can any one will going to help me please?

[Milton.J]

This worm make changes in the AUTOEXEC.BAT file, causing infected systems to pause at booting. The said event then needs the user to press any key to resume the booting process. This worm also makes disable the Folder Options item in the Tools drop-down menu through the main menu bar of Windows Explorer and Control Panel. The described action protects the affected user from modifying such settings as showing hidden folders and displaying file paths in title bars.

[Spyrus]

First open registry editor window.
Then click on the Start and then Run, type REGEDIT,
Now press Enter.
Double-click in the left panel of the following:
HKEY_LOCAL_MACHINE>SOFTWARE>Microsoft>
Windows>CurrentVersion>Run
Locate and delete the entry in the left panel:

• On Windows ME, 2000, XP, and Server 2003

Bron-Spizaetus = "%Windows%\ShellNew\sempalong.exe"

• On Windows NT

Bron-Spizaetus = "\ShellNew\sempalong.exe"

[Snake08]

Try to restore AUTOEXEC.BAT
You have to open AUTOEXEC.BAT with Notepad. Now click on the Startand then Run.
Now type this text string in the Open input box then press Enter:
notepad c:\autoexec.bat
Remove the given entry generated by the malware:
pause
Close AUTOEXEC.BAT and click Yes when prompted to save.

[Zachary]

WORM_RONTOKBRO.J worm makes the given registry entries to make sure its automatic run at every time system boot:

On Windows 2000, XP, and Server 2003

HKEY_CURRENT_USER\Software\Microsoft\
Windows\CurrentVersion\Run
Tok-Cirrhatus = ""%UserProfile%\Application Data\smss.exe""

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Windows\CurrentVersion\Run
Bron-Spizaetus = ""%Windows%\ShellNew\sempalong.exe""

[Big Fish]

WORM_RONTOKBRO.J worm makes changes in the given registry entries, or creates them if they do not present on the infected system yet:

HKEY_CURRENT_USER\Software\Microsoft\
Windows\CurrentVersion\Policies\Explorer
NoFolderOptions = "dword:00000001"

[Shen]

WORM_RONTOKBRO.J worm makes changes in the given registry entries, or creates them if they do not present on the infected system yet:

HKEY_CURRENT_USER\Software\Microsoft\
Windows\CurrentVersion\Policies\Explorer
NoFolderOptions = "dword:00000001"