Worm:Win32/Phorpiex.O Removal Guide – How to Completely Remove Worm:Win32/Phorpiex.O From Your PC?

Do you have instant messaging software installed on your computer? The instant messaging software such as ICQ and Skype makes life convenient and interesting. You can contact with your friends and strangers whenever as you prefer. However, those messaging applications are also utilized by cyber criminals to distribute computer viruses and worms. Worm:Win32/Phorpiex.O is one of the threats. If your computer is infected by this worm, follow the guide in this post and you can get rid of Worm:Win32/Phorpiex.O completely.

Information about Worm:Win32/Phorpiex.O

Worm:Win32/Phorpiex.O is a member of the Win32/Phorpiex family of worms. It spreads via instant messaging applications. Unlike other computer viruses, it doesn’t need to be bundled with freeware on the Internet to infect users’ PCs. With a message sent by the worm, your computer will be invaded. Usually, the worm sends a message to invite all of the victim’s contacts and invites them to open a picture that may be a copy of the worm. The message is according to the language you set on the instant application.

When you open the copy of the worm, it will drop several component files into the %Temp% folder so that it can make sure there is no problem on its delivery of the payload. The worm will download arbitrary files, including malware, from remote sever. Your PC performance will become worse due to the additional malware.

Symptoms of Worm:Win32/Phorpiex.O infection

1. Some strange files are presented suddenly on the Temp folder of your computer.
2. Your contacts on instant massaging programs receive a message from your account not written by you. The message usually contains a picture or a link and appears in the conversation history.
3. Your computer performs weirdly.

Worm:Win32/Phorpiex.O removal instructions:

Step1. Enter your PC in Safe Mode with Networking.

Press F8 constantly before Windows loads after restarting your PC. Use the up and down arrow keys to choose Safe Mode with Networking in Windows Advanced Options menu and then press Enter.
Step2. Stop process of the worm.

Open Task Manager by pressing Ctrl + Alt + Delete. In Processes tab, select the process associated with Worm:Win32/Phorpiex.O and terminate it.

[random].exe
Step3. Delete the component files dropped by the worm.

Locate to the Temp folder of your system and erase the following malicious files.

%TEMP%\<six-digit random number>.exe

%TEMP%\NRRQSCAkYD.zuG

%TEMP%\rmrf<four-digit random number>.bat

%TEMP%\ZSa<two-digit random number>.tmp

Note: If you use Windows 2000, XP, and 2003, go to “C:\DOCUME~1\<user>\LOCALS~1\Temp”. If you use Vista, 7 and 8, the default location is “C:\Users\<user name>\AppData\Local\Temp”.

Step4. Get rid of registry entries generated by the threat.

Click Start, type regedit in the Run box and click OK.

In the registry editor, locate to the following registry entry, right click on it and select Delete.

HKEY_CURRENT_USER\Software\twk70

HKEY_LOCAL_MACHINE\SOFTWARE\Micrsoft\Windows\CurrentVersion\Run

Velyqyuf = “%AppData%\urwqyi.exe”

Attention:The manual removal requires you to have enough computer expertise and skills. If you feel it daunting to remove Worm:Win32/Phorpiex.O with the steps above, use a professional removal tool instead. It is a good idea to deal with the tricky worm with the removal tool because the removal tool is specially designed with advanced technology and knows well how to remove the infections safely and completely. As a computer newbie, a reliable removal tool is suggested for you to wipe out Worm:Win32/Phorpiex.O.