Noul virus YM

De cateva zile circula un virus pe YM ,iar persoanele care :”bah link ,ia sa dau click ” ,au muscato .

In ce forma apare:

foto 😀 http://domeniu/image.php ; foto http://facebook-lmages.com/image.php ; foto:

foto: http://myphotoarchives.net/image.php ; foto: http://tviceimg.com/image.php …etc.

“Bine mah ,da cum scap? ” ,asa:

sursa: devirusare.com

Devirusare manuala:

Stergeti manual urmatoarele fisiere:

C:\Windows\mds.sys

C:\Windows\mdt.sys

C:\Windows\winbrd.jpg

C:\Windows\infocard.exe

Daca aveti Windows instalat pe alta partitie decat C, inlocuiti litera partitiei in calea fisierelor.

Stergeti manual urmatoarele chei de registry:

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\ [Firewall Administrating = “%Windir%\infocard.exe”]

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Terminal Server\Install\Software\Microsoft\Windows\CurrentVersion\Run\ [Firewall Administrating = “%Windir%\infocard.exe”]

HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run\ [Firewall Administrating = “%Windir%\infocard.exe”]

Devirusare automata:

Descarcati Malwarebytes Anti-Malware 1.46.

Instalati programul si la sfarsit asigurati-va ca ati bifat urmatoarele:

Update Malwarebytes’ Anti-Malware

Launch Malwarebytes’ Anti-Malware

Apasati Finish.

Dupa lansarea programului, selectati Perform full scan si apasati pe Scan.

Dupa ce termina click pe OK si apoi pe Show Results.

Asigurati-va ca e totul bifat si apoi click pe Remove Selected.


NU stiu sigur daca merge ,eu nu am luat “virusul”.

Advertisements

2 thoughts on “Noul virus YM

Leave a Reply

Fill in your details below or click an icon to log in:

WordPress.com Logo

You are commenting using your WordPress.com account. Log Out / Change )

Twitter picture

You are commenting using your Twitter account. Log Out / Change )

Facebook photo

You are commenting using your Facebook account. Log Out / Change )

Google+ photo

You are commenting using your Google+ account. Log Out / Change )

Connecting to %s