Inilah cara membersihkan Worm Tidserve atau W32;
Remove Registry Entries
1#. Click “Start.” Type “regedit” in the search box and press “Enter.” Allow the Registry Editor tool to launch.
Navigate the following registry entries on the left pane one at a time:
HKEY_CLASSES_ROOTmsqpdxvx”msqpdxpos” = “[RANDOM STRING VALUE]”
HKEY_CLASSES_ROOTmsqpdxvx”msqpdxsrv” = “[RANDOM DWORD VALUE]”
HKEY_CLASSES_ROOTmsqpdxvx”msqpdxid” = “[RANDOM STRING VALUE]”
HKEY_CLASSES_ROOTmsqpdxvx”msqpdxinfo” = “[RANDOM STRING VALUE]”
HKEY_CLASSES_ROOTmsqpdxvx”msqpdxaff” = “[RANDOM DWORD VALUE]”
HKEY_CLASSES_ROOTmsqpdxvx”msqpdxpff” = “[RANDOM DWORD VALUE]”
HKEY_CLASSES_ROOThomeviewCLSID”default” = “{6BF52A52-394A-11D3-B153-00C04F79FAA6}”
HKEY_LOCAL_MACHINESystemCurrentControlSetServicesmsqpdxserv.sys
HKEY_CLASSES_ROOTmsqpdxvx”msqpdxpos” = “[RANDOM STRING VALUE]”
HKEY_CLASSES_ROOTmsqpdxvx”msqpdxsrv” = “[RANDOM DWORD VALUE]”
HKEY_CLASSES_ROOTmsqpdxvx”msqpdxid” = “[RANDOM STRING VALUE]”
HKEY_CLASSES_ROOTmsqpdxvx”msqpdxinfo” = “[RANDOM STRING VALUE]”
HKEY_CLASSES_ROOTmsqpdxvx”msqpdxaff” = “[RANDOM DWORD VALUE]”
HKEY_CLASSES_ROOTmsqpdxvx”msqpdxpff” = “[RANDOM DWORD VALUE]”
HKEY_CLASSES_ROOThomeviewCLSID”default” = “{6BF52A52-394A-11D3-B153-00C04F79FAA6}”
HKEY_LOCAL_MACHINESystemCurrentControlSetServicesmsqpdxserv.sys
2#. Right-click the entries at the end of the registry path and click “Delete.” Exit the Registry Editor.
Unregister the Files
- Click “Start.”
- Type “cmd” in the search box and press “Enter.” Wait for the Command Prompt to appear.
- Type “regsvr32 /u dll.dll” at the Command Prompt and press “Enter.” This will unregister the Tidserv files.
- Exit the Command Prompt.
Remove the Files
- Click “Start.”
- Type “Windows Explorer” in the search box and press “Enter.” Allow the Windows Explorer to open.
- Type “dll.dll [RANDOM CHARACTERS].tmp” in the search box and press “Enter.”
- Right-click the file and click “Delete.”
CATATAN;
Backup dulu registry sebelum melakukan perubahan. Jangan melakukan langkah apapun selain yang diperintahkan dalam bagian Registry Editor. Anda dapat membahayakan sistem anda dengan membuat perubahan kecil pada registri Anda yang menyalahi aturan di atas.
Sumber : http: //agussale.com
