The characteristics of the virus shortcut:First of all, after infecting a computer, he will create a master file in My Documents database.mdbThe second is the virus will create a file autorun.inf in every hard disk drives, flash disks, and folders without exception.The third is that he will make Thumb.db file (be careful, note that this file without the letter s while the thumbnail cache of the original on the computer has an extra letter alias thumbs.db s) in each folderTo lure the victim, he will create a file Microsoft.lnk and New Harry Potter and .... Lnk in each folder which if executed will immediately activate the virus.Like other local viruses, he will make a duplicate of every folder but this time not with the extension. Exe but the extension. Ink alias shortcut.In task manager there are processes that are running wscript.exe services. In normal conditions, there is no process like this.The steps to remove viruses shortcut:
1. Turn off System Restore. Since I used to always turn off system restore as soon as the windows installation process. For the purposes of backup and imaging systems, I prefer using a third party like Acronis or Norton Ghost (read and dowload: Norton Ghost 15.0.0.35659 (2010) Full Serial Crack)
2. Turn off the virus wsrcipt.exe (C: \ WINDOWS \ System32 \ wscript.exe)Can use Process Explorer or misc. tool in HijackThis (read and download: HijackThis 2.0.2).
3. Delete files in My Documents database.mdb virus ..
4. Remove duplicate file viruses ..For the process of elimination, you can use the search facility in Windows .. In the "More advanced options", make sure the option "Search system folders" and "Search hidden files and folders" are both checked.Search a file named autorun.inf in size 8 KBSearch files by name Thumb.db size 8 KBSearch files with extensions. Lnk.lnk size 1 KBDelete all files found ..To further facilitate the search process as well as deleting the file is found, you can use the software UTool, a freeware which you can download it for free. The program will automatically find and then delete the files that are desired .
5. Remove Autorun registry created the virus using Hijackthis ..Search in the HKCU \ .. \ Run: database.mdb related files (on the picture but I've database.mdb file delete)regedit_run
For more ensure prevention process and protect our computers from virus attacks the very confusing this locally, you can do the following things:
1. After the windows installation process, immediately turn off system restore.
2. Install third party software such as Tweak UI or Magic Tweak to disable AutoRun and prevent teraktivasinya files. Inf. Maybe in Windows XP Professional, the process of disabling autorun can be done easily, but on the version of Win XP Home, you need this software. Additional information, programs MagicTweak besides functioning of disabling autorn can also be used to prevent executable files. Inf file autorun.inf which usually is the beginning of the outbreak of the virus will be automatically converted into pure notepad aka txt file by this program and he is no longer could be executed. This is very helpful if we inadvertently activate or execute the autorun autorun.inf even though the process has been disabled for all drives (including flash disk).
3. After all the windows installation, drivers, programs, and others have done, soon your system backup image using software like Acronis True Image or Norton Ghost, so that if later there is a problem that you can not finish with ease, you can merestoreasi backup system them.
4. If necessary, install Deep Freeze also if your computer is used by many people, thus setting the computer will not change.
5. Update info: The characteristics of the virus presence of the virus on the flash shortcut can be determined by differences in the flash icon is usually shaped like a drive icon to be changed as a folder icon. If you see this icon, it means the flash is there a virus. Use explorer and open the flash through explorer (do not click 2x from my computer) and delete the autorun file and files suspects other viruses manually by pressing shift + DEL (to not get caught in the recycle bin). Average local virus can be prevented by hand like this as long as the OPTIONS DISABLE autorun on windows and / or MagicTweak has been activated, and also OPTION DISABLE. INF FILE MagicTweak is turned on.Well, it might be a little tips on how to remove viruses and smoga shortcut your computer after a virus delete the shortcut to be free from viruses deh shortcut.
1. Turn off System Restore. Since I used to always turn off system restore as soon as the windows installation process. For the purposes of backup and imaging systems, I prefer using a third party like Acronis or Norton Ghost (read and dowload: Norton Ghost 15.0.0.35659 (2010) Full Serial Crack)
2. Turn off the virus wsrcipt.exe (C: \ WINDOWS \ System32 \ wscript.exe)Can use Process Explorer or misc. tool in HijackThis (read and download: HijackThis 2.0.2).
3. Delete files in My Documents database.mdb virus ..
4. Remove duplicate file viruses ..For the process of elimination, you can use the search facility in Windows .. In the "More advanced options", make sure the option "Search system folders" and "Search hidden files and folders" are both checked.Search a file named autorun.inf in size 8 KBSearch files by name Thumb.db size 8 KBSearch files with extensions. Lnk.lnk size 1 KBDelete all files found ..To further facilitate the search process as well as deleting the file is found, you can use the software UTool, a freeware which you can download it for free. The program will automatically find and then delete the files that are desired .
5. Remove Autorun registry created the virus using Hijackthis ..Search in the HKCU \ .. \ Run: database.mdb related files (on the picture but I've database.mdb file delete)regedit_run
For more ensure prevention process and protect our computers from virus attacks the very confusing this locally, you can do the following things:
1. After the windows installation process, immediately turn off system restore.
2. Install third party software such as Tweak UI or Magic Tweak to disable AutoRun and prevent teraktivasinya files. Inf. Maybe in Windows XP Professional, the process of disabling autorun can be done easily, but on the version of Win XP Home, you need this software. Additional information, programs MagicTweak besides functioning of disabling autorn can also be used to prevent executable files. Inf file autorun.inf which usually is the beginning of the outbreak of the virus will be automatically converted into pure notepad aka txt file by this program and he is no longer could be executed. This is very helpful if we inadvertently activate or execute the autorun autorun.inf even though the process has been disabled for all drives (including flash disk).
3. After all the windows installation, drivers, programs, and others have done, soon your system backup image using software like Acronis True Image or Norton Ghost, so that if later there is a problem that you can not finish with ease, you can merestoreasi backup system them.
4. If necessary, install Deep Freeze also if your computer is used by many people, thus setting the computer will not change.
5. Update info: The characteristics of the virus presence of the virus on the flash shortcut can be determined by differences in the flash icon is usually shaped like a drive icon to be changed as a folder icon. If you see this icon, it means the flash is there a virus. Use explorer and open the flash through explorer (do not click 2x from my computer) and delete the autorun file and files suspects other viruses manually by pressing shift + DEL (to not get caught in the recycle bin). Average local virus can be prevented by hand like this as long as the OPTIONS DISABLE autorun on windows and / or MagicTweak has been activated, and also OPTION DISABLE. INF FILE MagicTweak is turned on.Well, it might be a little tips on how to remove viruses and smoga shortcut your computer after a virus delete the shortcut to be free from viruses deh shortcut.
GOOD LUCK
Tidak ada komentar:
Posting Komentar