How to Remove I Worm Nuwar

The Nuwar worm is a backdoor parasite that installs on your computer and spreads through networks allowing an attacker unauthorized access to the infected computer. Once it has been executed, an attacker can change system settings, steal personal information, shut down processes and cause harm to your network. The Nuwar worm also installs additional parasites and registry values leaving your computer vulnerable to predation. It should be removed immediately to protect your personal information.

Instructions

1. Click the Windows "Start." Click "Run" and type "%SystemRoot%\system32\restore\rstrui.exe" (without quotes), and then click "OK." Click "Create a restore point" on the "Welcome to System Restore Page" and click "Next." Type in a name for your restore point and click "Create." Click "Close." This will back up the registry and your system.

2. Click the Windows "Start" button and click "Search." Click "Search All Files and Folders" on the left panel to open the search box.

3. Search for and delete this file: aromis.exe.

4. Click the Windows "Start" button and click "Run." Type %windir% and press "Enter" to open the "WINDOWS" folder.

5. Navigate through and delete the following files:
   libor.exe
   herjek.exe
   herjek.config
   aromis.config
   gogora.config

6. Click the Windows "Start" button and click "Run." Type "regedit" (without quotes) and click "OK" to open the registry.

7. Press "F3" to open the registry search box. Search for and delete the following registry values:
   libor
   herjek
   aromis
   %windir%\libor.exe
   %windir%\aromis.exe

Tips & Warnings

• It is important to back up your system and create a restore point you can revert to in case you accidentally delete vital system files.

References

• Removing Worm Nuwar