W32.LXD.Mirc - Removal

To remove this Trojan, remove the registry change made by the Trojan, delete the Trojan file from MS-DOS mode, and then delete files detected as W32.LXD.Mirc.

To edit the registry:

CAUTION: We strongly recommend that you back up the system registry before making any changes. Incorrect changes to the registry could result in permanent data loss or corrupted files. Please make sure you modify only the keys specified. Please see the document How to back up the Windows registry before proceeding.

1. Click Start, and click Run. The Run dialog box appears.
2. Type regedit and then click OK. The Registry Editor opens.
3. Navigate to the following key:
   
   HKEY_LOCAL_MACHINE\SOFTWARE\
   MICROSOFT\WINDOWS\CURRENTVERSION\RUN
   
4. In the right pane, locate and delete the value that points to
   
   \Windows\System\Whvlxd.exe
   
5. Exit the registry editor.
   

To remove the file

1. Click Start, and then click Shut Down.
2. Click Restart in MS-DOS mode, and then click OK.
3. At the DOS prompt, type the following, and press Enter after each one:
   
   NOTE: If you have Windows installed to a different locate, make the appropriate substitution when typing the first command.
   
   cd windows
   cd system
   del whvlxd.exe
   
4. Restart the computer.

To scan with NAV

1. Run LiveUpdate to make sure that you have the most recent virus definitions.
2. Start Norton AntiVirus (NAV) and run a full system scan, making sure that NAV is set to scan all files.
3. Delete any files detected as W32.LXD.Mirc

Technical Details