How to remove 10nb.exe

Update 21/09/2009
How to remove 10nb.exe (Win32/AutoRun.PSW.OnlineGames.AJ)
Detect by NOD32

10nb.exe
File size: 116142 bytes
CRC32: F65E7109
MD5: 5E1AE637F21056C6385D84468E31588E
SHA-1: 2C7B4A6FB1499906457B0C32A896F192679010EE
===================================================
Aliases:
a-squared 4.5.0.24 2009.09.14 Worm.Win32.Taterf!IK
AhnLab-V3 5.0.0.2 2009.09.14 Win-Trojan/Magania.116142
AntiVir 7.9.1.14 2009.09.14 TR/Crypt.ZPACK.Gen
Antiy-AVL 2.0.3.7 2009.09.14 -
Authentium 5.1.2.4 2009.09.14 W32/Trojan3.BEV
Avast 4.8.1351.0 2009.09.14 Win32:Kamso
AVG 8.5.0.412 2009.09.14 SHeur2.BCBB
BitDefender 7.2 2009.09.14 Trojan.PWS.Onlinegames.KCUS
CAT-QuickHeal 10.00 2009.09.14 Worm.Taterf.b
ClamAV 0.94.1 2009.09.14 -
Comodo 2319 2009.09.14 TrojWare.Win32.Trojan.Agent.Gen
DrWeb 5.0.0.12182 2009.09.14 Trojan.PWS.Wsgame.12661
eSafe 7.0.17.0 2009.09.14 Suspicious File
eTrust-Vet 31.6.6737 2009.09.14 Win32/Frethog.FGX
F-Prot 4.5.1.85 2009.09.14 W32/Trojan3.BEV
F-Secure 8.0.14470.0 2009.09.13 Trojan-GameThief.Win32.Magania.calm
Fortinet 3.120.0.0 2009.09.14 SPY/Magania
GData 19 2009.09.14 Trojan.PWS.Onlinegames.KCUS
Ikarus T3.1.1.72.0 2009.09.14 Worm.Win32.Taterf
Jiangmin 11.0.800 2009.09.14 Trojan/PSW.Magania.yii
K7AntiVirus 7.10.844 2009.09.14 -
Kaspersky 7.0.0.125 2009.09.14 Trojan-GameThief.Win32.Magania.calm
McAfee 5741 2009.09.14 Generic PWS.ak
McAfee+Artemis 5741 2009.09.14 Generic PWS.ak
McAfee-GW-Edition 6.8.5 2009.09.14 Heuristic.LooksLike.Win32.SuspiciousPE.B
Microsoft 1.5005 2009.09.14 Worm:Win32/Taterf.B
NOD32 4425 2009.09.14 Win32/AutoRun.PSW.OnlineGames.AJ
Norman 6.01.09 2009.09.14 OnLineGames.KGCC
nProtect 2009.1.8.0 2009.09.14 -
Panda 10.0.2.2 2009.09.14 Generic Worm
PCTools 4.4.2.0 2009.09.14 -
Prevx 3.0 2009.09.14 High Risk Cloaked Malware
Rising 21.47.04.00 2009.09.14 Packer.Win32.Nodef.c
Sophos 4.45.0 2009.09.14 Mal/Generic-A
Sunbelt 3.2.1858.2 2009.09.14 BehavesLike.Win32.Malware (v)
Symantec 1.4.4.12 2009.09.14 W32.Gammima.AG
TheHacker 6.3.4.4.403 2009.09.14 Trojan/Magania.calm
TrendMicro 8.950.0.1094 2009.09.14 -
VBA32 3.12.10.10 2009.09.14 Trojan-GameThief.Win32.Magania.calm
ViRobot 2009.9.14.1934 2009.09.14 Worm.Win32.Taterf.116142
VirusBuster 4.6.5.0 2009.09.14 -
------------------------------------------------------------------------
Create file
C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\herss.exe
C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\ cvasds0 (0-9)
X:\ 10nb.exe
X:\2o1ajagt
X:\autorun.inf
Download file
C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\am1.rar
Extract file
C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\am1.exe

Keys added
HKLM\SOFTWARE\Classes\CLSID\MADOWN

Values added
HKLM\SOFTWARE\Classes\CLSID\MADOWN\urlinfo: "dsa21ss.x"
HKCU\ Software\Microsoft\Windows\CurrentVersion\Run\
cdoosoft: "C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\herss.exe"

Values modified
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\
Folder\Hidden\SHOWALL\CheckedValue: 0x00000000
HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced\
Hidden: 0x00000002
HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced\
ShowSuperHidden: 0x00000000
HKCU\ Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\
NoDriveTypeAutoRun: 0x00000091

------------------------------------------------------------------------
วิธีกำจัด virus : 10nb.exe (Win32/PSW.OnlineGames.NNU)
-------------------------------------------------------------------------
Download Fix Tool : PeeTechFix-Win32/PSW.OnlineGame Version 2.0.3
สามารถตรวจสอบรายชื่อ virus ที่โปรแกรมสามารถ clean ได้ ใน VirusList.txt