Symantec Security Response has developed a removal tool to clean the following infections: W32.Evaman.C@mm.
Important: If you are on a network or have a full-time connection to the Internet, such as a DSL or cable modem, disconnect the computer from the network and Internet.
Disable or password-protect file sharing, or set the shared files toRead Only, before reconnecting the computers to the network or to theInternet. Because this worm spreads by using shared folders onnetworked computers, to ensure that the worm does not re-infect thecomputer after it has been removed, Symantec suggests sharing with ReadOnly access or by using password protection.
The W32.Evaman.C@mm Removal Tool does the following:
- Terminates the W32.Evaman.C@mm processes
- Deletes theW32.Evaman.C@mm files
- Deletes the registry values that theW32.Evaman.C@mm added
