Linkfars Description:                   Free Download Registry Booster

Linkfars is a worm that spreads by copying itself to removable drives, file-sharing application folders, and shared folders by replacing existing .exe files. It may also create .html files that display a message in Persian.

Remove the Worm Using Spyware Doctor!

Sponsored Links:

Linkfars Removal:

To remove Linkfars, please follow the instruction:

1. Terminate the processes in Task Manager:
   autoply.exe
   MSshare.exe
   OfficeUpdate.exe
   SexGame.exe
   Soundmax.exe
   svchost.exe
    
2. Click Start > Run. Type REGEDIT. Then click OK. Navigate to the subkeys and delete the values:
   HKEY_CURRENT_USER\Software\Wintek\"Install" = "[INFECTION TIME]"
   HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\"Soundmax" = "%ProgramFiles%\Sound Utility\Soundmax.exe"
   HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced\"Hidden" = "2" HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced\"HideFileExt" = "2" HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced\"ShowSuperHidden" = "2" HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\"Nofolderoptions" = "1" HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer\"Nofolderoptions" = "1"
   HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\SystemRestore\"DisableConfig" = "1"
   HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\SystemRestore\"DisableSR" = "1"
   Registry management is too hard? Download Registry Mechanic, and you will find it too easy!
    
3. Remove the files in Explorer if exist:
   %DriveLetter%\autoply.exe
   %Temp%\svchost.exe
   %Program Files%\Common Files\Microsoft Shared\MSshare.exe
   %Program Files%\Sound Utility\Soundmax.exe
   %Program Files%\XPCode\SexGame.exe
   %Program Files%\XPCode\SexScreenSaver.scr
   %Program Files%\XPCode\SexGameList.pif
   %Windows Dir%\Web\OfficeUpdate.exe

Spyware Doctor can automatically remove the worm. Even if you remove it manually, we recommend you should use Spyware Doctor to make sure it's completely removed from your system and will not be reinstalled by itself.

More Removal Instructions for Emerging Adware & Spyware