recently I got infected by virus about autorun.inf and printer.exe
when my usb thumb put in the computer it will replicate itself
to clean it
i surf the web
delete these keys:
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run
mswindws mssql.exe
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run
mswindws mssql.exe
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon
shell Explorer.exe work.exe
manually kill these processes using procexp from sysinternal or task manager:
%systemroot%\system32\cftmons.exe
%systemroot%\system32\work.exe
%systemroot%\system32\mssql.exe
del the files mentioned above
files are with hidden and system attrib
so using the command:
attrib -s -h cftmons.exe
and so on
Monday, 19 May 2008
Subscribe to:
Post Comments (Atom)
Labels
- ahk (1)
- android (1)
- apache (1)
- cifs (1)
- cygwin (2)
- E17 (1)
- gOS (1)
- grldr (4)
- grub (4)
- linux (5)
- mp4 (4)
- mysql (2)
- mytv (5)
- mytv download (5)
- php (2)
- pidgin (1)
- pxe (1)
- rtmp (7)
- rtmpdump (1)
- rtmpe (5)
- samba (1)
- sed (5)
- ssed (4)
- tvb (1)
- tvb.com (6)
- tvb.com.hk (6)
- ubuntu (2)
- virtualbox (1)
- winflp (1)
- xargs (1)
No comments:
Post a Comment