Tuesday, June 7

How to Remove Worm MyMP3.vbs

MyMP3.vbs is a worm that spreads itself through USB devices. This worm usually infects Windows 98, ME, NT, 2000, XP, Server 2003 machines. So I guess Vista machines are safe from this infection. This virus creates a folder icon named MyMP3.vbs. This worm sets itself to your autorun files so that it can spread easily. Unfortunately some antiviruses can’t remove this worm so what I have for you here is how you can remove this worm manually.
To remove MyMP3.vbs just follow the below procedure:

1. First, temporarily disable your system restore

2. Restart your computer


4. Open your registry editor Start –> Run –> type regedit

5. Go to this key:

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run

6. Delete value with data C:\WINDOWS\MyMP3.vbs

7 .We will now have to delete all the related files, doing this manually and a pain even for expert users so I will provide a batch code so you can remove all files easily. I can just upload the bat file but I think this is much better to show you and give you some experience on batch programming.

– copy and paste all the codes below onto your notepad and save it as mymp3remover.bat
c:
cd\
attrib -s -h -r mymp3.vbs
del mymp3.vbs

attrib -s -h -r autorun.inf
del autorun.inf
echo  Drive C: DONE…

cd windows
attrib -s -h -r mymp3.vbs
del mymp3.vbs

attrib -s -h -r autorun.inf
del autorun.inf
echo  Drive C:\WINDOWS DONE…

d:
attrib -s -h -r mymp3.vbs
del mymp3.vbs

attrib -s -h -r autorun.inf
del autorun.inf
echo  Drive D: DONE…

e:
attrib -s -h -r mymp3.vbs
del mymp3.vbs

attrib -s -h -r autorun.inf
del autorun.inf
echo  Drive E: DONE…

f:
attrib -s -h -r mymp3.vbs
del mymp3.vbs

attrib -s -h -r autorun.inf
del autorun.inf
echo  Drive F: DONE…

g:
attrib -s -h -r mymp3.vbs
del mymp3.vbs

attrib -s -h -r autorun.inf
del autorun.inf
echo  Drive G: DONE…

h:
attrib -s -h -r mymp3.vbs
del mymp3.vbs

attrib -s -h -r autorun.inf
del autorun.inf
echo  Drive H: DONE…

i:
attrib -s -h -r mymp3.vbs
del mymp3.vbs

attrib -s -h -r autorun.inf
del autorun.inf
echo  Drive I: DONE…

j:
attrib -s -h -r mymp3.vbs
del mymp3.vbs

attrib -s -h -r autorun.inf
del autorun.inf
echo  Drive J: DONE…

k:
attrib -s -h -r mymp3.vbs
del mymp3.vbs

attrib -s -h -r autorun.inf
del autorun.inf
echo  Drive K: DONE…

l:
attrib -s -h -r mymp3.vbs
del mymp3.vbs

attrib -s -h -r autorun.inf
del autorun.inf
echo  Drive L: DONE…

m:
attrib -s -h -r mymp3.vbs
del mymp3.vbs

attrib -s -h -r autorun.inf
del autorun.inf
echo  Drive M: DONE…

n:
attrib -s -h -r mymp3.vbs
del mymp3.vbs

attrib -s -h -r autorun.inf
del autorun.inf
echo  Drive N: DONE…

o:
attrib -s -h -r mymp3.vbs
del mymp3.vbs

attrib -s -h -r autorun.inf
del autorun.inf
echo  Drive O: DONE…

p:
attrib -s -h -r mymp3.vbs
del mymp3.vbs

attrib -s -h -r autorun.inf
del autorun.inf
echo  Drive P: DONE…

q:
attrib -s -h -r mymp3.vbs
del mymp3.vbs

attrib -s -h -r autorun.inf
del autorun.inf
echo  Drive Q: DONE…

r:
attrib -s -h -r mymp3.vbs
del mymp3.vbs

attrib -s -h -r autorun.inf
del autorun.inf
echo  Drive R: DONE…

s:
attrib -s -h -r mymp3.vbs
del mymp3.vbs

attrib -s -h -r autorun.inf
del autorun.inf
echo  Drive S: DONE…

t:
attrib -s -h -r mymp3.vbs
del mymp3.vbs

attrib -s -h -r autorun.inf
del autorun.inf
echo  Drive T: DONE…

u:
attrib -s -h -r mymp3.vbs
del mymp3.vbs

attrib -s -h -r autorun.inf
del autorun.inf
echo  Drive U: DONE…

v:
attrib -s -h -r mymp3.vbs
del mymp3.vbs

attrib -s -h -r autorun.inf
del autorun.inf
echo  Drive V: DONE…

w:
attrib -s -h -r mymp3.vbs
del mymp3.vbs

attrib -s -h -r autorun.inf
del autorun.inf
echo  Drive W: DONE…

x:
attrib -s -h -r mymp3.vbs
del mymp3.vbs

attrib -s -h -r autorun.inf
del autorun.inf
echo  Drive X: DONE…

y:
attrib -s -h -r mymp3.vbs
del mymp3.vbs

attrib -s -h -r autorun.inf
del autorun.inf
echo  Drive Y: DONE…

z:
attrib -s -h -r mymp3.vbs
del mymp3.vbs

attrib -s -h -r autorun.inf
del autorun.inf
echo  Drive Z: DONE…
8. Insert all the infected usb drive then run mymp3remover.bat

9. Restart your computer and boot in normal mode.

10. Turn system restore back on, Run your Antivirus.

11. Your done… no 11th step :D

No comments:

Post a Comment