How to remove the WORM_SOHANAD.DR infection

The WORM_SOHANAD.DR worm is once that propogates as an attachment to email messages that are spammed by other malware or users.  It is also possible, that this worm can be installed via other malware that download and install it on your computer.  When infected the following files will be created on your computer:

  • C:\Windows\dc.exe
  • C:\Windows\SVIQ.EXE
  • C:\Windows\System\Fun.exe

Once running, the worm will read your Outlook address book and spam all of the addresses in your address book with emails containing the attachments:

  • dc.exe
  • Fun.exe

Automatic Removal Method

If you are infected with this malware, then we suggest you use Trend Micro antivirus to remove this infection. It is know to be able to remove this malware and it is included in its current virus definitions.  A big thumbs up for Trend Micro for being able to remove this infection so quickly.

DownloadDownload Trend Micro Antivirus to scan your computer

Manual Removal Instructions for

End these processes:

Learn how to end processes

dc.exe
sviq.exe
fun.exe


Delete these files:
Lean how to remove files

C:\Windows\dc.exe
C:\Windows\SVIQ.EXE
C:\Windows\System\Fun.exe

Remove these Registry keys:

Learn how to remove Windows Registry entries

Warning: Editing the Windows Registry incorrectly can cause problems with your computer that may cause it not to operate correctly.  Please edit the Registry only if you know what you are doing.  Otherwise, please use the automated removal method above.

HKEY_CURRENT_USER\Software\Microsoft\Windows\
CurrentVersion\Run
dc = “C:\Windows\dc.exe”
dc2k5 = “C:\Windows\SVIQ.EXE”
Fun = “C:\Windows\System\Fun.exe”

del.icio.us:How to remove the WORM_SOHANAD.DR infection  digg:How to remove the WORM_SOHANAD.DR infection  spurl:How to remove the WORM_SOHANAD.DR infection  wists:How to remove the WORM_SOHANAD.DR infection  simpy:How to remove the WORM_SOHANAD.DR infection  newsvine:How to remove the WORM_SOHANAD.DR infection  blinklist:How to remove the WORM_SOHANAD.DR infection  furl:How to remove the WORM_SOHANAD.DR infection  reddit:How to remove the WORM_SOHANAD.DR infection  fark:How to remove the WORM_SOHANAD.DR infection  blogmarks:How to remove the WORM_SOHANAD.DR infection  Y!:How to remove the WORM_SOHANAD.DR infection  smarking:How to remove the WORM_SOHANAD.DR infection  magnolia:How to remove the WORM_SOHANAD.DR infection  segnalo:How to remove the WORM_SOHANAD.DR infection  gifttagging:How to remove the WORM_SOHANAD.DR infection

This entry was posted on Wednesday, August 13th, 2008 at 5:17 pm and is filed under Malware Removal Guide, Worms. You can follow any responses to this entry through the RSS 2.0 feed. You can leave a response, or trackback from your own site.

Leave a Reply