Click on screenshot to zoom
Danger level 7
Type: Worms

Worm.Kolab

Worm.Kolab is a horrible worm that you do not want anywhere near your computer. If your computer becomes infected with Worm.Kolab, you will experience many computer problems that will be really hard to get rid of.Worm.Kolab is able to gain access to your computer, as well as infect it, extremely quickly and easily. Unfortunately to remove it is very difficult and time consuming. Due to the factor that Worm.Kolab is a worm, it will create itself over and over again all of your machine. It also is able to infect your friend’s computers very easily without their knowledge.

Some other names Worm.Kolab may go by:
• Worm Kolab
• WormKolab
• Kolab.Worm
• Kolab Worm
• KolabWorm

Some of the symptoms of Worm.Kolab may be:
• Files will start appearing and disappearing.
• Your computer will become increasingly slow.
• Your email account may start to act strange.
• Emails may be sent to people that you didn\'t send them to.
• Some of your computer setting may suddenly change.
• It may feel like somebody is watching you.
• It may seem like you have a ghost on your computer.

Worm.Kolab is able to create many copies of itself very easily. The risks are also very high of the Worm.Kolab being able to gain access to all your confidential information as well as all your email adresses.Worm.Kolab can spread itself though a variety of methods. This includes peer to peer networks, freeware, shareware, malicious websites as well as email attachments.Worm.Kolab is able to change your system settings and mess with your files and folders, without your knowledge or consent. It may feel at times that the computer you once knew and trusty has gone mad and unstable.

It is imperative that you remove Worm.Kolab from your machine as soon as you may suspect that it is anywhere near your computer. It is very important that you always have decent and up to date protection on your computer that is able to detect Worm.Kolab for you. You have the option of making use of the manual removal or the automatic removal process. Be warned that if you do choose the manual removal process, that you may encounter problems and run the risk of doing even further damage to your computer. It is suggested that you choose the automatic removal process in order to remove Worm.Kolab.

Download Spyware Removal Tool to Remove* Worm.Kolab
  • Quick & tested solution for Worm.Kolab removal.
  • 100% Free Scan for Windows
disclaimer

How to manually remove Worm.Kolab

Files associated with Worm.Kolab infection:

715.exe
avdrive32.exe
jjdrive32.exe
umdmgr.exe
msvmcls64.exe
scvchost.exe
wind7upd.exe
ihost.exe
winupd01.exe
taskmrg32.exe
lsass.exe
sv.exe
winupd.exe
winupd01.exe
taskmrg32.exe
lsass.exe
csrss.exe
avdrive32.exe
wndrive32.exe
msvmcls64.exe
scvchost.exe
cidrive32.exe
services.exe
xfgn.exe
jjdrive32.exe
sv.exe
sysmngsr322.exe
winupd.exe
iexplorer.exe
715.exe
wind7upd.exe
umdmgr.exe
sysdiag64.exe
file.exe
waw32.exe
ihost.exe
waw32.exe
sysmngsr322.exe
file.exe
sysdiag64.exe
services.exe
cidrive32.exe
xfgn.exe
csrss.exe
iexplorer.exe

Worm.Kolab processes to kill:

sv.exe
ihost.exe
lsass.exe
taskmrg32.exe
winupd01.exe
cidrive32.exe
winupd.exe
csrss.exe
msvmcls64.exe
file.exe
iexplorer.exe
sysdiag64.exe
jjdrive32.exe
winupd01.exe
taskmrg32.exe
lsass.exe
csrss.exe
avdrive32.exe
wndrive32.exe
msvmcls64.exe
scvchost.exe
cidrive32.exe
services.exe
xfgn.exe
jjdrive32.exe
sv.exe
sysmngsr322.exe
winupd.exe
iexplorer.exe
715.exe
wind7upd.exe
umdmgr.exe
sysdiag64.exe
file.exe
waw32.exe
ihost.exe
umdmgr.exe
avdrive32.exe
scvchost.exe
waw32.exe
sysmngsr322.exe
wind7upd.exe
xfgn.exe
715.exe
services.exe

Remove Worm.Kolab registry entries:

HKEY_LOCAL_MACHINESOFTWAREMICROSOFTWINDOWSCURRENTVERSIONRUN Microsoft Driver Setup
HKEY_LOCAL_MACHINE\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\RUN\ Microsoft Driver Setup
HKEY_LOCAL_MACHINE\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\RUN\ file
HKEY_LOCAL_MACHINE\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\RUN\ MicrosoftNAPC
HKEY_LOCAL_MACHINE\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\RUN\ 788
HKEY_LOCAL_MACHINE\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\RUN\ MS Virtual CLS
HKEY_LOCAL_MACHINE\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\RUN\ Windows Management Service
HKEY_LOCAL_MACHINE\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\RUN\ Microsoft Update Setup
HKEY_LOCAL_MACHINE\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\RUN\ Advanced DHTML Enable
HKEY_LOCAL_MACHINE\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\RUN\ Windows automatic updates
HKEY_LOCAL_MACHINE\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\RUN\ winupdate
Disclaimer

Comments

  1. fer Feb 24, 2010

    worm.kolab is in my computer but it on the quarantine of my antivirus should i just delete it...?

  2. itman Mar 12, 2010

    yesm

  3. timothy Apr 18, 2010

    I tried your removal method but its a worm hence it keeps replicating and coming back, both the exes and registry entries just reappear an hour later. Need a better solution for the removal of this piece of crap.

  4. Col Aug 15, 2010

    Stop the process first and clean the registry.

    Might also suggest that using MSCONFIG to remove unneeded apps from start up

    Should that fail, reimage the machine

  5. Robert Bryant Apr 7, 2012

    Infected registry key on my comp:

    HKEY_LOCAL_MACHINE\System\CurrentControlSet\Enum\Root\LEGACY_WINDOWS_HOSTS_CONTROLLER

    Watch out...

Post comment — WE NEED YOUR OPINION!

Comment:
Name:
Please enter security code:
This is a captcha-picture. It is used to prevent mass-access by robots.