Virus Alert – SOCKSA.EXE

Files called socksa.exe, filekan.exe, and algsrv.exe install with Worm_VB.CBW. This worm runs on system startup and spreads via both physical and removable drives using files nakmed tel.xls.exe and a special autorun.inf. The worm launches automatically when the drive is accessed. You'll find more information at http://www.trendmicro.com/vinfo/virusencyclo/default5.asp?VName=WORM%5FVB%2ECBW&VSect;=T.

We'd recommend removing these files using WinPatrol. First, kill them under Active Tasks then remove them from your Startup Programs. If running WinPatrol 8.x or later; right click each file then select "Delete file on Reboot". Finally, reboot your system and make sure the files are really gone.

  • Virus
  • Remove