The characteristics of the virus shortcut:
First of all, after infecting a computer, he will create a master file in My Documents database.mdb
The second is the virus will create a autorun.inf file on each hard disk drives, flash disks, and folders without exception.
The third is that he will make Thumb.db file (be careful, be aware that these files without an s, while the thumbnail of the original cache in the computer has an additional letter alias thumbs.db s) in each folder
To lure the victim, he will create a file Microsoft.lnk and New Harry Potter and .... lnk in each folder which if exercised will immediately activate the virus.
As with other local viruses, he will make a duplicate of each folder but this time not with the extension. exe but the extension. Ink alias shortcut.
In task manager there are processes that are running wscript.exe services. Under normal conditions, there is no process like this.
The steps to remove viruses shortcut:
First of all, after infecting a computer, he will create a master file in My Documents database.mdb
The second is the virus will create a autorun.inf file on each hard disk drives, flash disks, and folders without exception.
The third is that he will make Thumb.db file (be careful, be aware that these files without an s, while the thumbnail of the original cache in the computer has an additional letter alias thumbs.db s) in each folder
To lure the victim, he will create a file Microsoft.lnk and New Harry Potter and .... lnk in each folder which if exercised will immediately activate the virus.
As with other local viruses, he will make a duplicate of each folder but this time not with the extension. exe but the extension. Ink alias shortcut.
In task manager there are processes that are running wscript.exe services. Under normal conditions, there is no process like this.
The steps to remove viruses shortcut:
- Turn off System Restore. Since I used to always turn off system restore windows immediately after the installation process. For backup and imaging systems, I prefer using a third party such as Acronis or Norton Ghost (read and dowload: Norton Ghost 15.0.0.35659 (2010) Full Crack Serial)
- Turn off the virus wsrcipt.exe (C: \ WINDOWS \ System32 \ wscript.exe) Can use Process Explorer or misc. tool in HijackThis (read and download: HijackThis 2.0.2).
- Delete files in My Documents database.mdb virus ..
- Remove duplicate files virus ..
For the removal process, you can use the search facility in Windows .. In the "More advanced options", make sure the option "Search system folders" and "Search hidden files and folders" both checked.
Search by name autorun.inf file size 8 KB
Search files by name Thumb.db size 8 KB
Search files with the extension. Lnk.lnk size 1 KB
Delete all files found ..
To further facilitate the search process as well as deleting a file is found, you can use UTool software, a freeware which you can download for free. This program will automatically find and then delete the files you want (see picture).
5. Remove Autorun registry created a virus using HijackThis ..
Search in the HKCU \ .. \ Run: database.mdb related files (in the picture but I've database.mdb file delete)
regedit_run
Search by name autorun.inf file size 8 KB
Search files by name Thumb.db size 8 KB
Search files with the extension. Lnk.lnk size 1 KB
Delete all files found ..
To further facilitate the search process as well as deleting a file is found, you can use UTool software, a freeware which you can download for free. This program will automatically find and then delete the files you want (see picture).
5. Remove Autorun registry created a virus using HijackThis ..
Search in the HKCU \ .. \ Run: database.mdb related files (in the picture but I've database.mdb file delete)
regedit_run
To further solidified the prevention process and protect our computers from virus attacks locally very confusing, you can do the following things:
- After the installation of windows, immediately turn off system restore.
- Install third party software such as Tweak UI or Magic Tweak to disable autorun and prevent teraktivasinya files. Inf. Maybe in Windows XP Professional, disable autorun process can be done easily, but on the version of Win XP Home, you need this software. Additional information, program MagicTweak besides autorn disable function can also be used to prevent executable files. Inf file autorun.inf which usually is the beginning of the outbreak of the virus will be automatically converted into pure alias notepad txt file by this program and he is no longer can be executed. This is very helpful if we inadvertently activate or execute autorun.inf autorun is disabled even though the process for all drives (including flash disk).
- After all the installation windows, drivers, programs, and others have done, immediately back up your system image using software like Acronis True Image or Norton Ghost, so that if later there is a problem you could not accomplish with ease, you can merestoreasi backup system them.
- If necessary, install Deep Freeze also if your computer is used by many people, so that the computer settings will not be changing.
- Update info: The characteristics of the virus presence of virus shortcut on flash can be identified by differences in the flash icon is usually shaped like an icon for the drive to be changed as a folder icon. If you see this icon, it means there is a virus in a flash. Use explorer and open the flash through the explorer (do not click 2x from my computer) and delete the autorun file and file2 suspect other viruses manually by pressing shift + DEL (so as not to get caught in the recycle bin). Average local virus can be prevented by means such manual provided OPTION DISABLE autorun on Windows and / or MagicTweak has been activated, and also OPTION DISABLE. INF FILE on MagicTweak has been activated.
Well, it might be a little tips on how to remove viruses smoga shortcut and remove viruses your computer after the shortcut to be free from viruses deh shortcut.
0 comments:
Post a Comment