Minggu, 26 April 2009

removal Net-Worm.Win32.Kido.dv

if your computer does not have an up-to-date antivirus, or does not have an antivirus solution at all, you can either use a special removal tool, which can be found here support.kaspersky.com or follow the instructions below:

1. Delete the system registry key shown below:
[HKLM\SYSTEM\CurrentControlSet\Services\netsvcs]
2. Delete "%System%\.dll" from the system registry key parameter shown below:
[HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SvcHost] "netsvcs"
3. Reboot the computer.
4. Delete the original worm file (the location will depend on how the malicious program penetrated the computer).
5. Delete copies of the worm:
%System%\.dll
%Program Files%\Internet Explorer\.dll
%Program Files%\Movie Maker\.dll
%All Users Application Data%\.dll
%Temp%\.dll
%System%\.tmp
%Temp%\.tmp
is a random string of symbols
6. Delete the files shown below from all removable storage media:
:\autorun.inf :\RECYCLER\S-<%d%>-<%d%>-<%d%>-<%d%>-<%d%>-<%d%>-<%d%>\.vmx
.

rnd is a random string of lower case symbols; d is a random number; x is the disk
7. Download and install operating system updates from the link below:
8. http://www.microsoft.com/technet/security/Bulletin/MS08-067.mspx Update your antivirus databases and perform a full scan of the computer (download a trial version of Kaspersky Anti-Virus.

0 komentar: