Dettagli domande frequenti...
Risposta: Io uso PcCillin che nell'ultimo aggiornamento è in grado di rimuoverlo...comunque ti invio la soluzione per farlo a mano...purtroppo è in inglese, spero tu non abbia problemi:
-------------------------------------
Removing Autostart Entries from the Registry
Removing Autostart entries from registry prevents the malware from executing during startup.
Open the Registry Editor. Click Start>Run, type REGEDIT then hit the enter key.
In the left panel, double-click the following:
HKEY_LOCAL_MACHINE>Software>Microsoft>Windows>
CurrentVersion>Run
In the right panel, locate and delete the entry or entries with this value:
ScrSvr = %WINDOWS%\ScrSvr.exe
Note: %Windows% is the Windows directory, usually C:\Windows or C:\WinNT.
Close Registry Editor.
NOTE: If you were not able to terminate the malware process from memory as described in the previous procedure, restart your system.
Removing Autostart Entries from System Files
A malware may modify system files so that it automatically executes at every Windows startup. These startup entries must be removed before the system can be restarted safely.
Open System Configuration Editor. To do this, click Start>Run, type SYSEDIT, then press Enter.
In System Configuration Editor, select the WIN.INI window.
Under the [windows] section, locate the lines that begin with:
run =
From the same lines, delete the malware path and filename:
%Windows%\scrsvr.exe
Close System Configuration Editor and click Yes when prompted to save.
Terminating the Malware Program
This procedure terminates the running malware process from memory.
Open Windows Task Manager.
For Win98/WinME users, please see NOTE below
On Windows NT/2000/XP systems, press
CTRL+SHIFT+ESC, and click the Processes tab.
In the list of running programs*, locate the process:
SCRSVR.EXE
Select the malware process, then press either the End Task or the End Process button, depending on the version of Windows on your system.
To check if the malware process has been terminated, close Task Manager, and then open it again.
Close Task Manager.
---------------------------------
Altrimenti la casa produttrice di PcCillin offre una scansione online al seguente indirizzo:
http://housecall.antivirus.com/
Altrimenti ancora prova a aggiornare il tuo antivirus con le ultime definizioni virali
Se hai problemi scrivici.