How to Remove Patched User32 Virus (W32/Mariofev.worm Virus Removal)

October 5, 2010, By Fouad Bajwa

The Patched User32 virus infection is the result of a commonly known trojan called W32/Mariofev.worm that infects a Windows operating system registry. On top of that it creates holes in a system’s security exposing personal information and potentially damaging threats.

There are various methods to remove the Patched User32 virus (W32/Mariofev.worm) so here’s what you need to do.

Preparing your system for Patched User32 Virus removal:

First of all we will have to disable the System Restore and then we will fix the Windows Registry

  1. Click the “Start” menu and select “Control Panel.”
  2. Double-click “System” and choose “System Restore” tab.
  3. Click “Turn off System Restore.”
  4. Click Start Menu and the Run prompt
  5. Enter the command “REGEDIT” and press “Enter” to launch the Windows Registry editor.
  6. Press “Ctrl” and “F” simultaneously to launch search
  7. Enter “SCNa” and then press “Enter” to find all entries by this name.
  8. Right-click all registry entries that appear and click “Delete.”
  9. This step prevents the virus from re-installing after removal.
  10. Finally close the Registry editor.
Manually removing the Patched User32 Virus:

In order for Windows to automatically check and possibly replace any damaged system files with newly functional ones, try the following manual removal method:

  1. Windows carries a commandline command, “sfc” that can scan and check all Windows system files. In the event that any files are missing or damaged, SFC will replace them by the necessary functional copies.  As these functional files are copied from a folder called the dllcache folder, in the event that it is missing, the program will prompt for the install CD/DVD of your Windows operating system.
  2. First click on the Start Menu. Then click Run.
  3. Either type cmd to launch the command line interface and enter the command or simply type: sfc /scannow in the Run dialogue box to execute the command directly.

  4. How-to Remove the Patched User32 Virus

  5. Click OK
  6. System scan may take anything between 20 to 30 minutes.

Patched User32 Virus Removal using the Microsoft Windows Malicious Software Removal Tool (MSRT)

The Microsoft Windows Malicious Software Removal Tool (MSRT) checks Windows Vista, WIndows 7, Windows XP, Windows 2000, and Windows Server 2003 computers for infections by specific, prevalent malicious software— including Blaster, Sasser, and Mydoom; and helps remove these infections.

When the detection and removal process is complete, the tool displays a report describing the outcome, including which, if any, malicious software was detected and removed. The tool creates a log file named mrt.log in the %WINDIR%\debug folder.

  1. Download and install Microsoft Windows Malicious Software Removal Tool (KB890830) from here.
  2. How-to Remove the Patched User32 Virus

  3. Open MSRT through the desktop icon or select it in Start Menu > “All Programs”.
  4. Click “Next” to go to “Scan Type” window and select “Full Scan” to ensure you remove all traces of W32/Mariofev.worm.
  5. How-to Remove the Patched User32 Virus

  6. Click “Next” to begin the scan.
  7. How-to Remove the Patched User32 Virus

  8. MSRT will show the results of your scan when the scan is complete.
  9. Remove any malicious files and folders discovered by MSRT.
  10. Restart your computer.
  11. One clear indication of virus removal of W32/Mariofev.worm is that you will no longer receive any alerts about the Patched User32 virus.

Patched User32 Virus Removal using an automated virus, malware and trojan removal tool:

  1. Shut down or close all applications and programs running on your computer.
  2. Download and install the Malwarebytes’ Anti-Malware program from here.
  3. How-to Remove Defense Center and/or Protection Center

  4. When the program’s installation has been completed it will ask you to update it before performing any scan so that it scans your system using the latest database of issues for the program.
  5. Whilst updating, if you run into any kind of downloading problems, you should open and configure your computer’s firewall program to configure it to allow internet access permissions to Malwarebyte’s Anti-Malware.
  6. Finally run Malware Bytes Anti-Malware allowing it to perform a complete scan of your PC and remove any infections that it detects.
  7. Your computer should now be free of Defense Center and Protection Center malware.
© 2008-2012 - All rights reserved | Privacy Policy