Home | More Virus Remove Process...

Free antivirus software,Free antivirus,Trojan Removal Instructions,Spyware remove Instructions

How to remove Spyware.NetScreenWatch

How to remove Spyware.NetScreenWatch

Author:Spyware.NetScreenWatch Hits: UpdateTime:2009-1-1 11:04:08

How to remove Spyware.NetScreenWatch

Spyware.NetScreenWatch remover

Spyware.NetScreenWatch removal process

For remove Spyware.NetScreenWatch virus,please clean/delete all Spyware.NetScreenWatch infected files and Delete/Modify any values Spyware.NetScreenWatch added to the registry as following:

When the risk is executed, it creates the following files:

%UserProfile%\Desktop\NSWÍøÂçÆÁÄ»¼角ÊÓ¹ÜÀ赤.lnk
%UserProfile%\Local Settings\Temp\irsetup.exe
C:\Documents and Settings\All Users\Start Menu\Programs\Net Screen Watcher\Ð¶ÔØ Net Screen Watcher.lnk
C:\Documents and Settings\All Users\Start Menu\Programs\Net Screen Watcher ÍøÂçÆÁÄ»¼角ÊÓ\NSWÀ迆Ê﹞Í¼Ïñ¼ÇÂ¼²¥﹞Å¹ÜÀ赤.lnk
C:\Documents and Settings\All Users\Start Menu\Programs\Net Screen Watcher ÍøÂçÆÁÄ»¼角ÊÓ\NSWÍøÂçÆÁÄ»¼角ÊÓ¹ÜÀ赤.lnk
C:\Documents and Settings\All Users\Start Menu\Programs\Net Screen Watcher ÍøÂçÆÁÄ»¼角ÊÓ\Ð¶ÔØ Net Screen Watcher ÍøÂçÆÁÄ»¼角ÊÓ.lnk
%ProgramFiles%\Net Screen Watcher\irunin.bmp
%ProgramFiles%\Net Screen Watcher\irunin.dat
%ProgramFiles%\Net Screen Watcher\irunin.ini
%ProgramFiles%\Net Screen Watcher\irunin.lng
%ProgramFiles%\Net Screen Watcher\NSW.exe
%ProgramFiles%\Net Screen Watcher\NswData.mpg
%ProgramFiles%\Net Screen Watcher\NswTemp.Dat
%ProgramFiles%\Net Screen Watcher\SetNSW.exe
%ProgramFiles%\Net Screen Watcher\WinServer.exe
%ProgramFiles%\Net Screen Watcher\wntsvr.exe
%ProgramFiles%\Net Screen Watcher ÍøÂçÆÁÄ»¼角ÊÓ\irunin.bmp
%ProgramFiles%\Net Screen Watcher ÍøÂçÆÁÄ»¼角ÊÓ\irunin.dat
%ProgramFiles%\Net Screen Watcher ÍøÂçÆÁÄ»¼角ÊÓ\irunin.ini
%ProgramFiles%\Net Screen Watcher ÍøÂçÆÁÄ»¼角ÊÓ\irunin.lng
%ProgramFiles%\Net Screen Watcher ÍøÂçÆÁÄ»¼角ÊÓ\MYNSW.cn
%ProgramFiles%\Net Screen Watcher ÍøÂçÆÁÄ»¼角ÊÓ\NSW.exe
%ProgramFiles%\Net Screen Watcher ÍøÂçÆÁÄ»¼角ÊÓ\Recinfo.nsw
%ProgramFiles%\Net Screen Watcher ÍøÂçÆÁÄ»¼角ÊÓ\SeeImage.ZQI
%ProgramFiles%\Net Screen Watcher ÍøÂçÆÁÄ»¼角ÊÓ\SeeImageM.exe
%Winder%\iun6002.exe

The risk then creates the following registry entry, so that it starts when Windows starts:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\"mynsw" = "C:\Program Files\Net Screen Watcher\wntsrv.exe"

The risk also creates the following registry entries:

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\App Management\ARPCache\Net Screen Watcher ÍøÂçÆÁÄ»¼角ÊÓ¹ÜÀ赤¶Ë Æ車Òµ～æ V1.78 (2008.08.26) www.mynsw.cn
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Net Screen Watcher ÍøÂçÆÁÄ»¼角ÊÓ¹ÜÀ赤¶Ë Æ車Òµ～æ V1.78 (2008.08.26) www.mynsw.cn
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Net Screen WatcherÓÃ»∫¶Ë£“ÊÜ¼角ÊÓ¶Ë£© Æ車Òµ～æ For Win98 V1.68 Beta3
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Net Screen WatcherÓÃ»∫¶Ë£“ÊÜ¼角ÊÓ¶Ë£© Æ車Òµ～æ For Windows Vista V1.68 Beta3
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Net Screen WatcherÓÃ»∫¶Ë£“ÊÜ¼角ÊÓ¶Ë£© Æ車Òµ～æ For Windows2000/XP/2003 V1.68 (2007.08.03) www.mynsw.cn
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Net Screen WatcherÓÃ»∫¶Ë£“ÊÜ¼角ÊÓ¶Ë£© Æ車Òµ¾«¼辰～æ For Windows2000/XP/2003 V1.68 (2007.11.14) www.mynsw.cn
HKEY_LOCAL_MACHINE\SOFTWARE\ZQNSWkey
HKEY_LOCAL_MACHINE\SOFTWARE\ZQkey
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\NSWServer
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\USBSTOR

The risk then periodically takes screenshots on the computer and sends them to a remote computer.

For successful remove Spyware.NetScreenWatch virus,you may also need do as following:
1. Temporarily Disable System Restore .

2. Update the virus definitions. Reboot computer in SafeMode;

3. Delete the IE temp files,some Spyware.NetScreenWatch temp file exisit there.

4.If you failed to remove Spyware.NetScreenWatch,please go to our remove help forum:http://help.antiviruses123.com

End Of The Article How to remove Spyware.NetScreenWatch remove process

Suspicious.MLApp
Suspicious.IRCBot
W32.Spyrat
Kollah YW  removal ins＃
Keygen for Acronis Pro＃
SpywareRemover2009  re＃
AV Antispyware  remova＃
Suspicious.S.MH2
Suspicious.Graybird
W32.Woospi!inf
Suspicious.Tidserv
Suspicious.Vundo.2
Suspicious.Skintrim
Suspicious.Lop
Brospy IF  removal ins＃
Suspicious.Swizzor
Suspicious.Farfli.2
AntiSpyware Pro 2009  ＃
Kaspersky Key Finder  ＃
Suspicious.Harakit
Suspicious.Vundo
W32.Spamuzle.E!inf
AntispywareProtector
Suspicious.MH690.A
ASC AntiSpyware  remov＃
Internet Speed Monitor＃
Panopticum LensPro III＃
Spyware Protect 2009  ＃
Spyware.KeyProwler
Spyware.MLog360
SpywareProtect2009
Xsoftspy Keygen
Suspicious.MH690
Antispy knight
Agent ajpy  removal in＃
SillyDl FYW  removal i＃
AntiSpywareGuard
Suspicious.Farfli
Spyware.CompuSpy
AntivirusPlasma