Search This Blog

Thursday, August 7, 2008

Microsoft .Net Framework TPM - Virus

My antivirus detect a new virus and some file has been deleted but there is a pop up windows keep on showing up and say that "procedure not found". After check around, i found something strange in windows services

Service name: bjvhrz
Display name: bjvhrz
Description: Microsoft .NET Framework TPM
Path to executable: C:\WINDOWS\system32\svchost.exe -k bjvhrz



I'm not able to stop and to disabled it.



To solve it,
  1. Disable System Restore
  2. Back up registry
  3. Restart in Safe Mode
  4. Open Registry Editor. Click Start>Run, type REGEDIT, then press Enter.
  5. In the left panel, double-click the following:
    HKEY_LOCAL_MACHINE>SYSTEM>CurrentControlSet>Services
  6. Still in the left panel, locate and delete the key:
    bjvhrz
  7. Close Registry Editor.

3 comments:

Anonymous said...

HKEY_LOCAL_MACHINE>SYSTEM>CurrentControlSet>Servi

it was cut. . can you please tell the complete?

thank you =)

In blues said...

HKEY_LOCAL_MACHINE> SYSTEM>CurrentControlSet>Services

Max G said...

Or you can use the built in functions for deleting services "sc delete SERVICENAME"

In this case it'd be "sc delete bjvhrz"