Showing posts with label fix virus. Show all posts
Showing posts with label fix virus. Show all posts

Friday, August 27, 2010

How to Remove Virus Shortcut Folder Using Removal Antivirus Tool

Today I have some bad experience with Virus Shortcut Folder, the symptom of this virus is create new shortcut folder like “foto bugil lnk”, “pesan rahasia lnk”, “folder.lnk” and the name of your folder in your hard drive. The size of this virus is 1 kb and virus spread very fast in my network.

After Fighting this malicious programs which is running in my computer with no result finally I find good Removal Antivirus Tool to client this virus. Of course there are manual step if you want to clean this virus manually but it’s more easy if you can find the removal tool right? :-)

Thursday, April 9, 2009

A Quick Way To Find Out If Your Computer Infected By Virus Conficker

Worm Virus

Conficker (aka Kido/Downadup ) is the most widely spread Virus at this time, Sometime many people doesn’t know if their computer infected by confiker or not. the easy way to find out is by visiting the site which is provide conficker test page.

There are several test sites that can help you check for Conficker infection. These links open a page that performs the test and shows the result.

1. Conficker test from The H and heise Security.
You can visit their site on http://www.heise.de . If you are blocked from loading the remote images in the first row of the top table above (AV/security sites) but not blocked from loading the remote images in the second row then your Windows PC may be infected by Conficker (or some other malicious software).



If certain images are missing on the test page as shown, the system is likely to be infected.

2. Conficker test from the University of Bonn
Visait their site on http://iv.cs.uni-bonn.de/
If your computer free from the infection you can get like the picture below :



Check your computer whether infected by confiker or not using removal tools from AV vendors
You can download and run the applications from the Antivirus vendor below:
• Sophos - download link: ssconftool_10_sfx.exe
• Symantec - Download Link: FixDwndp.exe
• F-Secure – download link: f-downadup.zip
• McAfee - download link: Stinger_Coficker.exe
• Trend Micro - download link: SysClean-WORM_DOWNAD.zip
• Kaspersky - download link: KKiller_v3.4.3.zip
• BitDefender - download link: bd_rem_tool.zip
• Eset (NOD32) - download link: EConfickerRemover.exe

Related Topics
Windows Malicious Software Removal Tool (Removal Tool from Microsoft Windows)
A Quick Way To Find Out If Your Computer Infected By Virus Conficker
Complete List of Free Anti-Virus Software and Safe Place to Download
The Best Antivirus 2009 (Top 10 Antivirus 2009)
How to Remove / Eliminate Conficker Worm and Newest Variant ( Conficker B++ )

Saturday, February 28, 2009

How to Remove / Eliminate Conficker Worm and Newest Variant ( Conficker B++ )

Conficker Worm

W32/ Conficker.DV Also Known As: Win32/Conficker.A [Computer Associates], W32/Downadup.A [F-Secure], Conficker.A [Panda Software], Net-Worm.Win32.Kido.bt [Kaspersky], WORM_DOWNAD.AP [Trend]
Newest Variant: Conficker B++ Aliases: Conficker B++, Conficker B, Conficker B++ Worm

A few days ago I have experience with Conficker worm or worm DownAD. Some computer in my office infected by this worm (the original worm and also with newest variant from this worm, Conficker B++)

This virus infect the pc’s by exploiting security hole in windows operating system.
If your computer not infect by this virus, it is recommended to install the Patch from Microsoft, you can download from http://www.microsoft.com/technet/security/Bulletin/MS08-067.mspx and make sure your Antivirus software always up-to-date.

Ok, Follow the step below to Remove / Eliminate Conficker Worm and newest variant ( Conficker B++ ) :

The thing that you have to prepared :

1. Disconnect PC which is infect by Conficker worm from the network.( if computer connected to the network)

2. Download removal tool from www.Symantec.com ,
you can download from http://www.symantec.com/content/en/us/global/removal_tool/threat_writeups/FixDownadup.exe (file exe)
Or http://www.ziddu.com/download/3672659/FixDownadup.zip.html (file zip)
This removal tool to clean original Conficker worm (old variant)

3. Download removal tool from http://www.spyware-techie.com/ .
you can download from http://siri.urz.free.fr/Fix/SmitfraudFix.exe (file exe)
Or from http://www.ziddu.com/download/3672707/SmitfraudFix.zip.html (file zip)
This removal tool to clean newest variant conficker worm ( Conficker B++ )

Now you’re ready to clean the conficker worm

1. Turn off system restore ( Right Click My Computer-Properties-System restore )

2. Restart computer and login using “safe mode” (by pressing F8 when the computer boot up)
3. Use removal tool (FixDownup.exe) from Symantec to clean and remove original Conficker worm ( if exist ). After finished Then..

4. Use removal tool (SmitfraudFix.exe) from www.spyware-techie.com to clean and remove newest variant from conficker ( Conficker B++ ).
- Once the Disk Cleanup program is complete, you will be prompted with the message ‘Registry cleaning - Do you want to clean the registry’. Answer Y (Yes) and hit Enter. Reboot your computer.
- SmitFraudFix will now check if wininet.dll is infected. SmitFraudFix will ask you whether to replace the infected file (if there’s any) ‘Replace infected
file?’ Answer by typing Y (Yes) and hit Enter.
- Reboot your computer to complete the cleaning process
- After reboot, a Notepad screen may appear containing a log of all the files
removed from your computer. If it doesn’t appear, a file will be created called
rapport.txt in the root of your drive, (Local Disk C:).
- Restart your computer in Safe Mode (how to do safe mode).
- Go to C:\Windows\Temp, click Edit, click Select All, press DELETE, and then
click Yes to confirm that you want all the items to go to the Recycle Bin.
- Go to C:\Documents and Settings\[LISTED USER]\Local Settings\Temp, click Edit, click Select All, press DELETE, and then click Yes to confirm that
you want all the items to go to the Recycle Bin.

5. Reboot your computer back to normal mode. Download patch from Microsoft http://www.microsoft.com/technet/security/Bulletin/MS08-067.mspx to close the security hole or if you’re using windows XP download Service Pack 3 from Microsoft http://www.microsoft.com/downloads/details.aspx?displaylang=en&FamilyID=5b33b5a8-5e76-401f-be08-1e1555d4f3d4
6. Done .

Related Topics
How to Disable USB Autorun in Windows
Windows Malicious Software Removal Tool (Removal Tool from Microsoft Windows)
How to Fix “Initializing the root folders to display” Message
Trend Micro Antivirus Client incorrectly appearing as offline or disconnected after Trend Micro Officescan Server changed the IP address
The Best Antivirus 2009 (Top 10 Antivirus 2009)
How to find system uptime for Windows XP, Vista and Windows Server 2003
How to Remove / Eliminate Conficker Worm and Newest Variant ( Conficker B++ )
How to reset or remove Trend Micro OfficeScan password to default