Click on screenshot to zoom
Danger level 6
Type: Worms

Worm.Slenfbot

Worm.Slenfbot is not just any worm. It is a very harmful infection that will create some serious computer problems for you. You need to be aware of the fact that this threat is able to spread via certain instant messenger applications which may include but is not limited to Skype, Yahoo, and MSN. The bad news is that this worm is powerful enough to actually spread via external drives, which makes it very easy for you to pass this threat onto the computers of your friends and family. The worst part is that this worm includes a backdoor functionality which enables it to install all types of additional malware onto your PC. It is strongly suggested that you make use of a reliable antispyware removal product that will effectively remove Worm.Slenfbot from your computer system. If you are looking for an alternative method, or you need more information, please continue reading.

Besides using the vulnerabilities in instant messaging and external drives, Worm.Slenfbot also exploits the MS06-040 vulnerability. A patch for this vulnerability has been issued, and it is not a concern of Windows users any longer; however, this proves how important it is to keep up with all updates. If a security vulnerability is detected and you do not patch it right away, cyber criminals will try to exploit it in any way possible. There is no way of saying whether or not this worm could use similar vulnerabilities in the future, so you need to make sure you are smart about this. Install updates whenever they are offered, and choose automatic updating to make sure that you never miss an important security update again. And this is not limited to just Windows updates. You also need to update your security software to ensure that it detects even the most recent threats.

It is unlikely that you will notice anything after Worm.Slenfbot slithers into your operating system, which is why it might be difficult for you to pinpoint the moment it enters. Of course, if this threat starts letting in malware that you can identify, you might discover that a worm is an infection that you need to delete first. Note that this worm can use various concealment methods. For one, it can delete its own original copy after copying itself to another location. Furthermore, it can conceal its processes. Due to this, you might not see anything suspicious when you analyze the processes via the Task Manager. Even if you discover certain components of this worm, it can protect itself from removal. It was found that the clandestine Worm.Slenfbot modifies explorer.exe to check if malicious files are present. If it is found that files are removed, they are automatically downloaded again. So, unless you delete every single component associated with this worm, it is likely to regenerate.

Worm.Slenfbot is also likely to check for external drives attached to the infected computer. It then can create a file called “autorun.inf” to help the worm automatically infect another system as soon as the infected drive is connected to it. When this worm infects a system, it uses various files, including ones with randomly generated names (e.g., igfxnk32.exe, wmpknc32.exe, 4F3F7.exe), as well as files with the names of authentic files (e.g., services.exe, svchost.exe). Needless to say, these names are chosen not without a reason but in the hopes of concealing malware. Unfortunately, this makes the removal process even more difficult because a risk of eliminating the wrong elements is created. In the worst case scenario, authentic files will be infected (e.g., explorer.exe) to aid the worm, and you will be stuck between removing these files and keeping them installed.

What do you know about the removal of worms? If you are inexperienced, why don’t you implement reliable anti-malware software that could eliminate malware automatically and, at the same time, ensure full-time Windows protection? It is essential for you to protect your PC; otherwise, malicious programs will find a way to infect it in the future. Another reason why you should consider installing anti-malware software is the existence of other infections that the worm could have infiltrated already. Even if you only need to delete Worm.Slenfbot, the manual removal process is extremely complicated, and most users will not be able to get rid of this threat themselves.

Download Spyware Removal Tool to Remove* Worm.Slenfbot
  • Quick & tested solution for Worm.Slenfbot removal.
  • 100% Free Scan for Windows
disclaimer

How to manually remove Worm.Slenfbot

Files associated with Worm.Slenfbot infection:

igfxnk32.exe
igfxhc32.exe
igfxsd32.exe
wmpcn3.exe
igfxdn86.exe
wmpdk32.exe
wmpxv2.exe
igfxpt64.exe
igfxdl32.exe
igfxrm32.exe
wmpnkc32.exe
wmpbk32.exe
wmphb32.exe
wnpgt2.exe
wmpknc32.exe
wmpsl64.exe
wmpxt2.exe
igfxsb86.exe
wmpnt86.exe
wmpdc32.exe
wmpdtf32.exe
wmpctd32.exe
wmpsh32.exe
wmpdb32.exe
igfxwl32.exe
igfxbt86.exe
igfxcf32.exe
igfxcp32.exe
igfxdv32.exe
igfxpa32.exe
igfxtd86.exe
igfxhc32.exe
igfxtd86.exe
wmpdk32.exe
wmpdc32.exe
igfxpm32.exe
igfxpa32.exe
wmpbk32.exe
igfxrm32.exe
igfxnk32.exe
wyq.exe
rtk.exe
gsn.exe
fox.exe
fgks.exe
dwme.exe
duy.exe
A0DBD.exe
4F3F7.exe
29C.exe
mgh.exe
B50CD.exe
aug.exe
10029.exe
F30.exe
bootcli.exe
wmpdtk32.exe
wmpdlr32.exe
wmpdlp32.exe
wmpdln32.exe
igfxdwx32.exe
igfxcv32.exe
igfxctv32.exe
igfxck32.exe
wmpkb32.exe
wmpnkc32.exe
wmpktb32.exe
wmpknc32.exe
wmphk32.exe
wmpdtv32.exe
wmpdtf32.exe
igfxwl32.exe
igfxmd32.exe
igfxdv32.exe
igfxdl32.exe
igfxcp32.exe
igfxcm32.exe
igfxcf32.exe
eoshkxtk.exe
ctfmonsbb.exe
21B2.exe
3BA0.exe
services.exe
4A.exe
11.exe
wmpdtc32.exe
ashUpdate.exe
msnlivemessenger.exe
scanquery147.exe
kxloadC4.dll
zmload89.dll
wloadF8.dll
mnpvo.dll
SpywareVanisher.exe
ewv.exe
dpi.exe
atloadb16.dll
28ED2723424.exe
xregex.exe
winsrv.exe
svdhalp.exe
svchost.exe
schannel32.exe
sbeio32.exe
recyclebin.exe
Recycle.Bin.exe
jsodj.exe
hti.exe
flg.exe
dxdiag.exe
dro.exe
daemonupd.exe
Ares.exe
WOSync.exe
systemup.exe
srvcap.exe
rsprox.exe
pkgfurotmvn.exe
KoH.exe
contacts[1].exe
cfmmon.exe
axb.exe
api-ms-win-core-memory-l1-1-032.dll
jusched.exe
vyuql.exe
gsyzq.exe
igfxsc32.exe
igfxmtv32.exe
igfxmgc32.exe
wnpgt2.exe
wmsrvc.exe
wmpxv2.exe
wmpxt2.exe
wmplay86.exe
wmpcn3.exe
wmpbv3.exe
regsrv32.exe
v6msn.exe
symlsrvn.exe
mfoxhgksjmo.exe
xdYEelKvGnI.exe
mspnp204f.exe
symlasvc.exe
hostx.exe
explormsn.exe
daemon-tools_daemon_tools_4.0.9.1_anglais_10729.exe
Keygen.exe
facebook-image1401925763.exe
nvsvc32.exe
wmpxv3.exe
igfxmd32.exe
wmpdi64.exe
wmpbv3.exe
wmphk32.exe
wmpktb32.exe
wmplay86.exe
igfxcd32.exe
wmsrvc.exe
regsrv32.exe
wmpdf32.exe
wmpkb32.exe
wmpdt86.exe
wmpnp32.exe
igfxpm32.exe
igfxcm32.exe
wmpdtv32.exe

Worm.Slenfbot DLL's to remove:

kxloadC4.dll
zmload89.dll
wloadF8.dll
mnpvo.dll
atloadb16.dll
api-ms-win-core-memory-l1-1-032.dll

Worm.Slenfbot processes to kill:

wmpkb32.exe
wmpdtv32.exe
wmpdb32.exe
igfxhc32.exe
igfxtd86.exe
wmpdk32.exe
wmpdc32.exe
igfxpm32.exe
igfxpa32.exe
wmpbk32.exe
igfxrm32.exe
igfxnk32.exe
wyq.exe
rtk.exe
gsn.exe
fox.exe
fgks.exe
dwme.exe
duy.exe
A0DBD.exe
4F3F7.exe
29C.exe
mgh.exe
B50CD.exe
aug.exe
10029.exe
F30.exe
bootcli.exe
wmpdtk32.exe
wmpdlr32.exe
wmpdlp32.exe
wmpdln32.exe
igfxdwx32.exe
igfxcv32.exe
igfxctv32.exe
igfxck32.exe
wmpkb32.exe
wmpnkc32.exe
wmpktb32.exe
wmpknc32.exe
wmphk32.exe
wmpdtv32.exe
wmpdtf32.exe
igfxwl32.exe
igfxmd32.exe
igfxdv32.exe
igfxdl32.exe
igfxcp32.exe
igfxcm32.exe
igfxcf32.exe
eoshkxtk.exe
ctfmonsbb.exe
21B2.exe
3BA0.exe
services.exe
4A.exe
11.exe
wmpdtc32.exe
ashUpdate.exe
msnlivemessenger.exe
scanquery147.exe
SpywareVanisher.exe
ewv.exe
dpi.exe
28ED2723424.exe
xregex.exe
winsrv.exe
svdhalp.exe
svchost.exe
schannel32.exe
sbeio32.exe
recyclebin.exe
Recycle.Bin.exe
jsodj.exe
hti.exe
flg.exe
dxdiag.exe
dro.exe
daemonupd.exe
Ares.exe
WOSync.exe
systemup.exe
srvcap.exe
rsprox.exe
pkgfurotmvn.exe
KoH.exe
contacts[1].exe
cfmmon.exe
axb.exe
jusched.exe
vyuql.exe
gsyzq.exe
igfxsc32.exe
igfxmtv32.exe
igfxmgc32.exe
wnpgt2.exe
wmsrvc.exe
wmpxv2.exe
wmpxt2.exe
wmplay86.exe
wmpcn3.exe
wmpbv3.exe
regsrv32.exe
v6msn.exe
symlsrvn.exe
mfoxhgksjmo.exe
xdYEelKvGnI.exe
mspnp204f.exe
symlasvc.exe
hostx.exe
explormsn.exe
daemon-tools_daemon_tools_4.0.9.1_anglais_10729.exe
Keygen.exe
facebook-image1401925763.exe
nvsvc32.exe
wmpxv3.exe
wmpbv3.exe
wmpnkc32.exe
wmpbk32.exe
igfxwl32.exe
wmpknc32.exe
wmpdk32.exe
wmphk32.exe
igfxdn86.exe
wmpnp32.exe
igfxpm32.exe
wmsrvc.exe
wmpcn3.exe
igfxcd32.exe
igfxpa32.exe
wmpktb32.exe
igfxbt86.exe
igfxsd32.exe
wmpxt2.exe
wmpnt86.exe
wmpdc32.exe
igfxcf32.exe
igfxpt64.exe
igfxrm32.exe
igfxcm32.exe
igfxsb86.exe
igfxnk32.exe
igfxmd32.exe
wmpdi64.exe
igfxdv32.exe
wmpdt86.exe
igfxcp32.exe
wnpgt2.exe
wmphb32.exe
regsrv32.exe
igfxdl32.exe
wmplay86.exe
igfxtd86.exe
wmpxv2.exe
igfxhc32.exe
wmpdtf32.exe
wmpdf32.exe
wmpctd32.exe
wmpsl64.exe
wmpsh32.exe
Disclaimer

Comments

  1. ali Oct 3, 2012

    thanks for your way

  2. Pcthreat Oct 4, 2012

    You're welcome!

Post comment — WE NEED YOUR OPINION!

Comment:
Name:
Please enter security code:
This is a captcha-picture. It is used to prevent mass-access by robots.