You annoyed with this virus? I was also annoyed, but I find the solution ...
Exposed to the virus harry potter character-characteristics as follows:
1. Create a file in the parent database.mdb My Documents
2. Create a file autorun.inf in every drive, flash disk, folder and
3. Thumb.db create a file (be careful with the letter s) in each folder
4. Create a file and Microsoft.lnk New Harry Potter and .... Lnk in each folder
5. Make a duplicate of each folder with extensi. Lnk
6. In the task manager there are services wscript.exe
Tips demolition:
1. Turn off System Restore .. (kilk right on my computer)
2. Turn off the virus wsrcipt.exe (C: \ WINDOWS \ System32 \ wscript.exe)
Can use Process Explorer or misc. HijackThis tool on ..
3. Delete virus files in the My Documents database.mdb ..
4. Remove duplicate files virus ..
Use the search facility in Windows ..
In the "More advanced options", make sure the option "Search system folders" and "Search
hidden files and folders "selected both ..
Search with the name autorun.inf file size 8 KB
Search the file with the name Thumb.db size 8 KB
Search files with the extension. Lnk.lnk size 1 KB
Delete all files that are found ..
5. Remove Autorun registry created by using HijackThis virus ..
Search in the HKCU \ Software \ Microsoft \ Windows \ CurrentVersion \ Run: related files database.mdb
No comments:
Post a Comment