Remove Lerma

Lerma Description

Lerma is a destructive Internet worm that spreads by e-mail and through unprotected network shares. The spyware is designed to overwrite all archives, images, screensavers, web pages, documents, multimedia and computer files it finds on a compromised PC with executable copies of itself. As a result the user can lose valuable personal information. Lerma automatically runs on every Windows startup.

Remove Lerma

Stop the following Lerma processes:
csrss.exe
ermasys32.exe
kernel32.exe
lasiaf.exe
mode.exe

Remove the following Lerma registry keys:
HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionRunLasErma
HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionRunServicesLasErma

Delete the following Lerma files:
csrss.exe
ermasys32.exe
kernel32.exe
lasiaf.exe
mode.exe

Other Spyware

0-9