Delete the Perfume.exe or W32.SillyFDC.BBA worm
Description:
W32.SillyFDC.BBA is a worm that spreads through removable media devices such as flash drives, external hard drives, and other USB storage devices. Once infected, your computer will then infect any other removable devices that become inserted into your computer. When infected, the worm will create the SystemDrive%\SYSTEM\[SID]\Perfume.exe file and then add the following registry key so that it runs automatically when you start Windows:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{28ABC5C0-4FCB-11CF-AAX5-22CX3C644241}
Manual Removal Instructions for W32.SillyFDC.BBA:
End these processes if they exist:
Learn how to end processes
Perfume.exe
Delete these files if they exist:
Lean how to remove files
%SystemDrive%\SYSTEM\[SID]\Perfume.exe
Remove these Registry keys if they exist:
Learn how to remove Windows Registry entries
Warning: Editing the Windows Registry incorrectly can cause problems with your computer that may cause it not to operate correctly. Please edit the Registry only if you know what you are doing.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{28ABC5C0-4FCB-11CF-AAX5-22CX3C644241}
January 12th, 2010 at 2:30 am
i have perfume.exe on my cowon player and i’m unable to remove it. i use a mac, so could someone please tell me how do i remove it.
while on my mac i can see all my music, when i switch on the player it says no music exists!