Imaut spyware or virus on your computer and how to remove Imaut or fix it.

Please make sure you know what you are doing before performing any of the instructions on this site. You maybe better off downloading a proven spyware scanner and let the program do the cleaning. You may need anti-virus software as well and please allow up to 10 hours to get your system back on its feet again. Please feel free to ask questions, tell us the problem and we will help for FREE. We also have a great selection of SPYWARE and VIRUS prevention software available to try.

Removal instructions for imaut:

Imaut is an Internet worm that spreads through instant messages using Yahoo! Messenger, AIM and Windows Live Messenger programs. The parasite’s messages contain links to malicious web pages. Once the user clicks on such a link, the worm gets secretly downloaded and installed to the system. Then it runs a spreading routine and a payload. Imaut changes the Internet Explorer default home page, disables the Task Manager and the Registry Editor, terminates some antivirus programs and modifies certain Yahoo! Messenger settings. The worm is able to update itself via the Internet. It automatically runs on every Windows startup.

Alias:

Unknown

Protect yourself from spyware and virus attacks PDF

Notes:


Stop processes:en.exe, link-en.exe, svchost32.exe, svhost32.exe

Remove Registry values:


HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionRunsvchost
HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionRunTask Manager
HKEY_CURRENT_USERSoftwareMicrosoftWindowsCurrentVersionPoliciesSystemDisableRegistryTools=1
HKEY_CURRENT_USERSoftwareMicrosoftWindowsCurrentVersionPoliciesSystemDisabeTaskMgr=1
HKEY_CURRENT_USERSoftwarePoliciesMicrosoftInternet ExplorerControl PanelHomepage=1
HKEY_CURRENT_USERSoftwareMicrosoftInternet ExplorerMainStart Page=[site address]
HKEY_CURRENT_USERSoftwareYahooPagerViewYMSGR_buzzContent URL=[site address]
HKEY_CURRENT_USERSoftwareYahooPagerViewYMSGR_LaunchcastContent URL=[site address]

Remove files:

en.exe, link-en.exe, svchost32.exe, svhost32.exe

Additional:[site address] is an address of a web site on either concerto4.net or antiry45.googlepages.com domain.Files svchost32.exe and svhost32.exe can be found in the main Windows folder C:Windows or C:Winnt. Imaut:

Share on Facebook