How to remove malwarebot

Symantec Norton antivirus 2009 14159042
February 20, 2010 at 09:36:44
Specs: Windows XP Home Edition, SP 3, 1.6 GHz and 8.5 GHz free space, 448 MB RAM

When scanning for virus/spyware, Norton Internet Security is always dectecting Malwarebot, and resolved security risk with no father action is required. Norton lists this spyware as a medium threat to my computer. And if I scan soon afterwards, the spyware reappears.

I have found websites tell how to remove the program manually, but the registry locations do not match any my registry files and program files. The only files that I found after using regediter’s find:

My Computer\HKEY_CURRENT_USER\Software\Microsoft\Search Assistant\ACMru\5603

Name Type Data
000 REG_SZ MalwareRemovalBot.exe
001 REG_SZ malwarebot

My Computer\HKEY_USERS\S-1-5-21-1957994488-261903793-725345543-1004\Software\Microsoft

Name Type Data
(default) REG_SZ (value not set)

My Computer\HKEY_USERS\S-1-5-21-1957994488-261903793-725345543-1004\Software\Microsoft\Search Assistant\ACMru\5603

Name Type Data
000 REG_SZ MalwareRemovalBot.exe
001 REG_SZ malwarebot

Are there any safe ways to permently remove or disable the program?
Are there any more files I have missed?


See More: How to remove malwarebot

February 20, 2010 at 12:37:08
maybe Run an mrt.exe which is an malicious prgrmme scam.
I do not Like Norton myself to Open and to dominating.
Can u not manual delete the File in D or C? or in Programmes?

Go into each Folder and delete until gone?

Report •

February 20, 2010 at 13:22:52

I am not 100% sure how safe deleting these registries without causing more harm to my computer and get rid of this spyware for good.

Report •

February 20, 2010 at 17:32:11
I would try one of the Kaspersky Virus scanning tools from Kaspkersky's site in safe mode and do a deep scan, I only recommend Kaspersky a lot because it saved me from a nasty Desktop Hijack a few months back that nothing I tried could get rid off. Have you tried Malware Bytes Anti-Malware?..That might work as well, but make sure to scan in safe mode.

Report •
Related Solutions

Ask Question