i do have this virus too.pls help us. |
i have this virus is almost like this pls help us:D ...reply at horianormal@yahoo.com |
use nod32 business edition
google it.... |
OK so if you want to get rid of it you can not rely on any antivirus (yet).
I downloaded Total Commander, opened regedit (start->run->regedit->OK), click CTRL+ALT+DEL, in task mamager end the task named EXPLORER.EXE (your explorer will shut down, i.e. desktop, taskbar). Now go into regedit under [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run] delete the entries with kava,ckvo or similar. Go to [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced] set Hidden to 1. Go to [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer] and delete "NoDriveTypeAutoRun" = 145 Open your Total Commander. Go to Configuration->Options->Display. Enable Show hidden/system files. Go to each of your drives with total Commander and delete the suspicious files(not folders). The names vary from system to system, so i opened my secondary partition(D:) first and the only files there were those infected so i deleted the same files on C: Now you can open your windows explorer. To further clean your PC go to C:\Windows\System32\. There delete the files named kavo or ckvo I got a lot of the info from http://www.eset.eu/buxus/generate_page.php?page_id=18601 but my nod antivir could do nothing aginst the virus..it kept coming back, maybe next ver. Hope it helps
|
After u have done what frostyandy said, u must also turn off all the restore points & restart. the autorun files of the trojan remain saved in those restore points. |
USE SCANSPYWARE 3.8.1 http://www.scanspyware.net/ |
Résultats pour Win32/psw.onlinegames.obj
Résultats pour Win32/psw.onlinegames.obj
Résultats pour Win32/psw.onlinegames.obj
Résultats pour Win32/psw.onlinegames.obj
Résultats pour Win32/psw.onlinegames.obj