Win32.BMW.j.75783: Virus Solution and Removal

Type: Virus

Systems Affected: Windows 95, Windows 98, Windows Me, Windows XP, Windows 2000, Windows NT, Windows Server 2003

Overview:

The virus Win32.BMW.j.75783 belongs to the trojan downloader, that is a variant of Worm.WhBoy.h. The virus is very dangerous, if you find one of the following symptoms, your computer may has been infected now.

Symptoms of W32.Klez.E@mm:

1. Once launched, the virus would copy itself as the following:
%sys32dir%\drivers\suchost.exe

2. Every 6 seconds stop the following services:
Schedule sharedaccess kacsvc avp McAfeeFramework McShield RsCCenter RsRavMon
And delete the following services:
avp RsRavMon RsCCenter FireSvc MskService NpfMntor Symantec Core Lc Spbbcsvc ccSetMgr ccProxy SndSrvc KpfwSvc wscsvc navapsvc McAfeeFramework McShield
Let the following security software failed:
kav kavpersonal50 avp McAfeeUpdaterUi Network Associates ShStatEXE

3. Once launched, the virus may caused of some icons display error:

4. Every half an hour to download a Trojan horse from:
http://www.*****.com/down/down.txt

5. Can not show hidden files and folders.

Related virus:Winur, Klez Worm, Feebs.b, Funny Trojan

Remove W32.Klez.E@mm:

You can also use antivirus software with latest updates to remove the virus quickly:

Norton Internet Security 2009