dec25.exe - Dangerous

%sysdir%\dec25.exe

Jeff's Story:

My PC had gotten a bad rootkit that my ISP antivirus software (powered by McAfee) could not detect, nor could fix.

I sought a solution on the Internet and discovered your product and tried out the trial.

You quickly found the rootkit and SAVED my PC!

I haven't had any problems since, and I'm extremely grateful.

Manual removal instructions:

%sysdir%\dec25.exe
Worm W32.Atak.F@mm
1. Copies itself as %system%\dec25.exe.
Adds the value:
"run"="%system%\dec25.exe"
to the Windows startup registry key.
If the infected computer runs Windows 95/98/Me, the worm adds:
run=%system%\dec25.exe
to the [windows] section in the Win.ini file.

Remove dec25.exe now!