Removal solution for W32/Routrobot.worm

[Eber]

Hi everyone, I urgently want to remove W32/Routrobot.worm worm from my computer. I have tried too many ways to delete this worm but this worm are not deleting from systems hard disk. This malware making numbers of files and folders in every partition. This worm is also running a numbers of process in system memory. I want to remove this virus as soon as possible, please help me?

[Milton.J]

There are file information of this worm:

• MD5 - eca1407e247ccc71792f5905c0f6e4bf
• SHA - 227D4018B258AE844D3639B46BC634D0709549FD

It is depend upon execution, this malware makes a copies its own into the given location:

• %WinDir%\system32\javaupdater.exe

[Steve123]

The malware spreads through copying its own into the shared folders of Peer-2-Peer programs utilizing the given names.

• %ProgramFiles%\winmx\shared\
• %ProgramFiles%\morpheus\my shared folder\
• %ProgramFiles%\emule\incoming\
• %ProgramFiles%\bearshare\shared\
• %ProgramFiles%\kazaa lite k++\my shared folder\
• %ProgramFiles%\kazaa\my shared folder\

[Shen]

The given registry keys are inserted into the computer:

• [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer]
• [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer\Run]
• [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\japplet2]

[Spyrus]

The given registry values are changed:

• [HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\ERSvc\] “Start:” = “0x00000004”
• [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\ServicesERSvc\] “Start:” = “0x00000004”
• [HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\wscsvc\] “Start:”= “0x00000004”

[Zachary]

There one more best and simple solution to remove the infected virus. Just you have to install a Kaspersky anti virus software application which easily available on the official web site of this application. You have to download and install this anti virus application on you system and then update the latest virus definition. Then scan your entire system to remove all malwares.