Remove Lirva

Lirva Description

Worm Lirva spreads in the Internet by e-mail, through IRC channels and via file-sharing networks. It installs itself to the computer and terminates most of the known antivirus and security-related processes. Then it starts its spreading routine. It modifies mIRC chat client's settings and spreads using this application. It places infected files to shared directories of popular peer-to-peer clients and tricks other users into downloading and installing these files. However, the worm spreads mostly by e-mail. It uses Microsoft Outlook mail application to distribute infected letters to all the contacts in the Address Book. The worm can steal some of the local passwords and send them to the author. Several times per month Lirva opens a web site and shows an animation.

Remove Lirva

To remove all Lirva files, you must kill all Lirva processes that are running in your computer's memory. To kill Lirva processes, press CTRL+ALT+DELETE to open the Windows Task Manager. Click on the "Processes" tab, search for Lirva, then right-click it and select "End Process" key.

You'll also need to remove Lirva registry keys. To remove Lirva registry keys, click on the Windows "Start" button and select "Run" to open Windows Registry Editor. A window will popup. Type "regedit" into the box, and click "OK". Search for the registry key "HKEY_LOCAL_MACHINESoftwareLirva." Right-click it and select "Delete."

Finally, you'll need to manually delete other malware files to clean your PC of Lirva. These Lirva can be in the form of EXE, DLL, LSP, TOOLBAR, BROWSER HIJACK, and/or BROWSER PLUGIN. For example, Lirva might create a file like
%PROGRAM_FILES%LirvaLirva.exe. Locate and remove these files.

Other Spyware

0-9