How to remove Kido

Kido description

Kido worm is another name for Conficker/Downadup infection. Kido a.k.a. Net-Worm.Win32.kido infection distributes itself via MS08-067 Windows vulnerability. The worst thing about Kido infection is its ability to join the infected machine to zombie network. The compromised computer may then be used by hackers for various malicious activities.

Download and install the latest Windows updates to avoid Worm.Win32.Kido.

If a computer is infected with Kido worm, security tools won’t be able to download updates. The infection also prevents downloading new security programs and visiting websites related to computer safety. Kido/Downadup/Conficker is also known for making a machine run really slow.

Get rid of Kido

• Manual step-by-step Kido removal
• Automatic easy Kido detection with Spyware Doctor
• Anti spyware Software. Spyware Doctor Review.

How to manually remove Kido

To remove Kido spyware you must block Kido sites, stop and remove processes, unregister DLL files, search and delete all other Kido files and registry utility. Follow the Kido detection and removal instructions below.

The most typical software removal method is to remove Kido by using "Add or Remove Programs" service. However there may be hidden Kido files, running processes and registries in your computer, so Kido may recreate all other files after reboot.

Kido manual removal instructions

Block Kido sites:
hgetmyip.org
getmyip.co.uk
checkip.dyndns.org
whatsmyipaddress.com
ahayw.info
ajcminmqpeu.com
anosb.biz
aqgcurmt.net
bdfbobhuls.com
bjmqxoxbmyq.org
bszeu.info
cfcpreiwtgx.net
cpfgbuwqv.biz
cukpubgb.net
dconkp.com
dpxzsrjhsn.org
dtyqryfi.biz
dviwvh.net
dwmpveim.info
dxnlypjjxp.biz
eaguzulxdr.org
ekrohmqa.info
eoblibwqaig.info
epvzvuah.info
ethogxkt.net
euwqeixq.biz
exxcpxm.net
eyjayqmwxxo.org
ezhvnjlvuk.org
fdzwsak.net
gatkcy.org
gceqy.info
ggcnqnr.info
gkmdbporqmp.biz
gmtgpb.org
guiahproe.info
gxepchol.net
gztql.net
haqrcz.com
hkqrhqev.com
hndrijmu.org
hvxmlcc.org
idahdfyojhz.com
ipbdwihw.info
iquvtfhm.net
irhtphctgn.com
ivouyvxaf.net
jfvyipo.info
jhhwydtk.com
jjbuafs.info
jptplynb.org
jutsyu.com
kagvjo.com
kfzksydrct.org
khvdkdjnrhr.biz
ktivtbse.net
lbori.com
ltxbrwfosrg.net
mhjhb.com
mtqcpiwod.biz
nsjmewgdb.com
ntshnjyxfh.net
nxphotp.com
ocykqj.biz
oenjrcaly.net
oororgpkbp.com
ozlqvnkiq.net
palrw.org
pmotqmf.com
pvuxb.info
qffszcfgyzn.org
qfoilcqp.com
qjafgfp.net
rfduzjbztg.biz
riuvunis.info
rlbidexd.org
rntbogfz.biz
rtkrhxsp.biz
ruolomicarp.org
rxytvgkapvw.biz
safxg.net
sdxkcnzcvhd.org
shbyxebiec.biz
srsoeggve.org
tbkmloh.net
tezjm.net
tilazlfn.com
tqlxquy.org
trxho.org
uiiwmmgr.com
upyuqxpmlxt.net
vdunf.net
vtewiyny.info
vuahzmvf.biz
vweoof.org
wkjhjr.com
xehlydgan.net
xmmzcsqm.biz
xtjejduc.org
xxwoteojg.biz
xytbvkrqhu.info
ybhufq.net
yenhbrt.biz
yfczve.info
ylfamhcgn.net
ylzbgyorfy.org
ysxbkquj.info
ythekdrar.net
yudxsol.org
yzbvrteij.biz
yzpjvpkdtq.biz
zjxuw.org
zpqhr.biz
zuuroktw.biz
zzkjecmf.com Read more how to block Kido sites

Locate and delete Kido registry entries:
KEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\{random}\Parameters\”ServiceDll” = “Path to worm”
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\{random}\”ImagePath” = %SystemRoot%\system32\svchost.exe -k netsvcs
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Tcpip\Parameters
“TcpNumConnections” = dword:0×00FFFFFE Read more how to delete Kido registry entries
Download RegistryBooster 2010 to scan errors caused by Kido

Detect and delete other Kido files:
%System%\[Random].dll
%Program Files%\Internet Explorer\[Random].dll
%Program Files%\Movie Maker\[Random].dll
%All Users Application Data%\[Random].dll
%Temp%\[Random].dll
%System%\[Random].tmp
%Temp%\[Random].tmp

We strongly recommend you to use spyware remover to track Kido and automaticaly remove Kido processes, registries and files as well as other spyware threats.

Tags: Conficker, Downadup, Kido, Net-Worm.Win32.kido, Worm.Win32.kido how to get rid of Kido how to remove Kido how to uninstall Kido

1. Daniel
   August 17th, 2011 at 1:04 pm

   Don’t bother trying to remove this until you’ve applied Microsoft’s update KB958644 to your system, or it will be immediately infected again by other computers on the network. Windows update won’t do this if you’re infected because the worm blocks windows update. You must manually download http://www.microsoft.com/download/en/details.aspx?displaylang=en&id=3205 or just search for KB958644. That fixes the vulnerability that allows the worm to spread.

   Reply

Leave a Reply