Removing W32.Rontokbro@mm Virus

9:22:00 PM |

W32.Rontokbro@mm is a mass-mailing worm that affects Windows operating systems. As a mass-mailing worm, it secretly installs on your computer, searches for email addresses and emails itself to any email addresses it finds. It also modifies registry entries, interferes with system components and causes system instability. Remove W32.Rontokbro@mm quickly and safely using these guided instructions.
  1. Launch the System Properties dialog box by clicking the "Start" menu, right-clicking "Computer" and then clicking "Properties." 
  2. Click the "System Properties" then click "System Restore" tab and click the "Turn off System Restore on all drives" check-box to disable System Restore. Click "Apply," click "Yes" and then click "OK" to save the changes.
  3. Launch your anti-virus program, install the latest updates by select the "Update" option and then run a full system scan. Delete any parasites your anti-virus program detects. Refer to your program's help documentation if you are unsure how to install the updates or run a full system scan. I am using norton.
  4. Click "Start," then launch the Registry Editor by clicking "Run," typing "regedit" (without quotes) in the open box and then clicking "OK." 
  5. Click the "HKEY_LOCAL_MACHINE" folder in the left pane to expand it. Expand the "Software" folder, then the "Microsoft" folder, then the "Windows" folder, then the "CurrentVersion" folder and finally the "Run" folder. In the right pane, right-click the "Bron-Spizaetus" = "C:\WINDOWS\PIF\CVT.exe" entry and click "Delete." 
  6. Navigate to the following entry (using the same procedure in step 5): HKEY_CURRENT_USER\software\microsoft\windows\currentversion\Policies\System. Double-click the "DisableRegistryTools" entry and enter "0" (zero) in the "Value Data" box to restore the entry to its original value. 
  7. Restore the following entries to their original values as well: HKEY_CURRENT_USER\software\microsoft\windows\currentversion\Policies\System\"DisableCMD" = "0" HKEY_CURRENT_USER\software\microsoft\windows\currentversion\Policies\Explorer\"NoFolderOptions" = "0" 
  8. Close the Registry Editor. Reenable System Restore and restart your computer.