How to delete Email-Worm.Win32.Warezov.op?

[Ernesto4]

Recently my antivirus has alerted about Email-Worm.Win32.Warezov.op being infected in my system. I do not know how it got into my system. From the name I am assuming that it may have come via some EMAIL attachment or something that I have taken from EMAIL. I have deleted it after I scan with ESCAN from the interface. But, on scanning it the next day, again I find the same infections at the same places. So, I need a solution on how to delete Email-Worm.Win32.Warezov.op? I am using Windows XP Service Pack2 and my browser is Internet Explorer 8.

[Big Fish]

Email-Worm.Win32.Warezov.op is a worm that spreads through attachments send through EMAILS. The attachments do not actually have the infection, but a component that allows download of other malicious contents from the web without the user's knowledge. Once it infects one particular system, it sends infected mails to the EMAIL address that it finds in the user's system. Email-Worm.Win32.Warezov.op is a Windows PE EXE file. Its components may have the size around 14KB to 135KB. Upack is used to pack its components. It is not that easy to delete Email-Worm.Win32.Warezov.op.

[Snake08]

When the Email-Worm.Win32.Warezov.op, which is a worm installs on your system, you get a message as "UNKNOWN ERROR". The executable file is copied at "%System%\dnsajobe.exe". It modifies many of the registry settings and creates the following system registry keys as follows:
[HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\dnsajobe]
"DllName" = "%System%\dnsajobe.dll"
"Startup" = "WlxStartupEvent"
"Shutdown" = "WlxShutdownEvent"
"Impersonate" = dword:00000000
"Asynchronous" = dword:00000000
Formatting is the only method to delete Email-Worm.Win32.Warezov.op.

[Steve123]

Email-Worm.Win32.Warezov.op has its own SMTP engine that it uses to send infected MAILS. The attachment gennerally has the name as: Update-KB<random four digit number>-x86.exe. To delete Email-Worm.Win32.Warezov.op, You have to start Windows in safe mode and then, run a full system scan of all your hard drives and flash drives. It is the only simple method available as I have an experience of removing it successfully from my system using this method.

[Shen]

To delete Email-Worm.Win32.Warezov.op do the following steps:

1. With the help of TASK MANAGER, stop the process of the backdoor.
2. Next, you need to delete Email-Worm.Win32.Warezov.op from its original location.
3. [HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\dnsajobe] has to be deleted from the registry.
4. After that, the manual deletion of the following files have to be done:
   
   • %System%\dnsajobe.dll
   • %System%\dnsajobe.exe
5. All the infected messages have to be removed from all the mail folders.

[Spyrus]

Email-Worm.Win32.Warezov.op comes under the category of an internet worm with a low threat level. But, since there is a risk of security, it has to be eradicated as soon as possible. If it is not removed, it may result in loss of important and confidential data. The performance of the system may be degraded as the worm spreads in the entire system utilizing all its resources. You need to do a boot scan with an antivirus like "QUICK HEAL TOTAL SECURITY" because all antiviruses do not provide the feature of boot scan.