Virus 'Folder Love' is known to have circulated in Indonesia. Check out some steps that can be done to eliminate these malicious programs from your computer.
The following steps are steps that can be done to eliminate the virus 'Folder Love' manually.
1. Disconnect / disconnect the computer that will be cleared from the network.
2. Disable / turn off 'System Restore' during the process of cleaning the virus.
3. Use the 'Task Manager' to kill the virus is active. Most likely with the name 'csrsc.exe'). To open the task manager, it can be done by pressing together Ctr + Alt + Del, or by right clicking on the Windows taskbar. Then turn off the virus with the click [End Process] the process csrsc.exe.
4. Remove the main file of the virus Autorun.QBP, found in C: \ WINDOWS \ system32, the name csrsc.exe size 793 kb and the size of 1 kb.Gunakan Autorun.inf search / find, to search for duplicate files other viruses, particularly in the media sharing or a USB flash / removable drive, the virus file size 793 kb, berextension exe & air khq type application and file across the drive. Do not forget to display the attribute 'Show hidden files ...' and eliminate the attribute 'Hide protected operating ...' on Folder Options.
5. Remove string registry has been created by the virus. To make it easier to use a registry script below.
[Version] Signature = "$ Chicago $" Provider = Vaksincom Oyee [DefaultInstall] AddReg = UnhookRegKey DelReg = del [UnhookRegKey] HKLM, SOFTWARE \ Classes \ batfile \ shell \ open \ command,,, "" "% 1" "% *" HKLM, SOFTWARE \ Classes \ comfile \ shell \ open \ command,,, "" "% 1" "% *" HKLM, SOFTWARE \ Classes \ exefile \ shell \ open \ command,,, "" "% 1" "% *" HKLM, SOFTWARE \ Classes \ scrfile \ shell \ open \ command,,, "" "% 1" "% *" HKLM, SOFTWARE \ Classes \ piffile \ shell \ open \ command,,, "" "% 1" "% *" HKLM, SOFTWARE \ Classes \ regfile \ shell \ open \ command,,, "regedit.exe"% 1 " HKLM, SOFTWARE \ Microsoft \ Windows NT \ CurrentVersion \ Winlogon, Shell, 0, Explorer.exe [Del] HKLM, SOFTWARE \ Microsoft \ Windows \ CurrentVersion \ Policies \ Explorer \ Run
Use the notepad, then save with the name 'repair.inf'. Use the Save As Type option to All Files to avoid mistakes. Run repair.inf with right click, then select [Install].
6. For optimal cleaning of viruses Autorun.QBP, use Norman Malware Cleaner is able to detect and eradicate this virus very well.
The following steps are steps that can be done to eliminate the virus 'Folder Love' manually.
1. Disconnect / disconnect the computer that will be cleared from the network.
2. Disable / turn off 'System Restore' during the process of cleaning the virus.
3. Use the 'Task Manager' to kill the virus is active. Most likely with the name 'csrsc.exe'). To open the task manager, it can be done by pressing together Ctr + Alt + Del, or by right clicking on the Windows taskbar. Then turn off the virus with the click [End Process] the process csrsc.exe.
4. Remove the main file of the virus Autorun.QBP, found in C: \ WINDOWS \ system32, the name csrsc.exe size 793 kb and the size of 1 kb.Gunakan Autorun.inf search / find, to search for duplicate files other viruses, particularly in the media sharing or a USB flash / removable drive, the virus file size 793 kb, berextension exe & air khq type application and file across the drive. Do not forget to display the attribute 'Show hidden files ...' and eliminate the attribute 'Hide protected operating ...' on Folder Options.
5. Remove string registry has been created by the virus. To make it easier to use a registry script below.
[Version] Signature = "$ Chicago $" Provider = Vaksincom Oyee [DefaultInstall] AddReg = UnhookRegKey DelReg = del [UnhookRegKey] HKLM, SOFTWARE \ Classes \ batfile \ shell \ open \ command,,, "" "% 1" "% *" HKLM, SOFTWARE \ Classes \ comfile \ shell \ open \ command,,, "" "% 1" "% *" HKLM, SOFTWARE \ Classes \ exefile \ shell \ open \ command,,, "" "% 1" "% *" HKLM, SOFTWARE \ Classes \ scrfile \ shell \ open \ command,,, "" "% 1" "% *" HKLM, SOFTWARE \ Classes \ piffile \ shell \ open \ command,,, "" "% 1" "% *" HKLM, SOFTWARE \ Classes \ regfile \ shell \ open \ command,,, "regedit.exe"% 1 " HKLM, SOFTWARE \ Microsoft \ Windows NT \ CurrentVersion \ Winlogon, Shell, 0, Explorer.exe [Del] HKLM, SOFTWARE \ Microsoft \ Windows \ CurrentVersion \ Policies \ Explorer \ Run
Use the notepad, then save with the name 'repair.inf'. Use the Save As Type option to All Files to avoid mistakes. Run repair.inf with right click, then select [Install].
6. For optimal cleaning of viruses Autorun.QBP, use Norman Malware Cleaner is able to detect and eradicate this virus very well.
No comments:
Post a Comment