Pages

Thursday, August 7, 2008

Microsoft .Net Framework TPM - Virus

My antivirus detect a new virus and some file has been deleted but there is a pop up windows keep on showing up and say that "procedure not found". After check around, i found something strange in windows services

Service name: bjvhrz
Display name: bjvhrz
Description: Microsoft .NET Framework TPM
Path to executable: C:\WINDOWS\system32\svchost.exe -k bjvhrz



I'm not able to stop and to disabled it.



To solve it,
  1. Disable System Restore
  2. Back up registry
  3. Restart in Safe Mode
  4. Open Registry Editor. Click Start>Run, type REGEDIT, then press Enter.
  5. In the left panel, double-click the following:
    HKEY_LOCAL_MACHINE>SYSTEM>CurrentControlSet>Services
  6. Still in the left panel, locate and delete the key:
    bjvhrz
  7. Close Registry Editor.

3 comments:

  1. HKEY_LOCAL_MACHINE>SYSTEM>CurrentControlSet>Servi

    it was cut. . can you please tell the complete?

    thank you =)

    ReplyDelete
  2. HKEY_LOCAL_MACHINE> SYSTEM>CurrentControlSet>Services

    ReplyDelete
  3. Or you can use the built in functions for deleting services "sc delete SERVICENAME"

    In this case it'd be "sc delete bjvhrz"

    ReplyDelete

Please don't spam!