http://07met.t35.com/vcc.gif
Showing posts with label Virus Solutions. Show all posts
Showing posts with label Virus Solutions. Show all posts

Saturday, November 7, 2009

Removing of kavo, tavo and ckvo virus

In this procedure, Go to "start" then click run type "msconfig" then go to "Startup" tab, then uncheck the startup item kavo, tavo and ckvo if there is any. this will disable the virus to regenerate autorun files, now click "apply" then "ok" and then "restart" button. After your pc is done restarting click "start" then "run" type cmd or command
Type the following:
cd\
dir /ah (this means display all hidden object because most viruses are hidden)
attrib *.* -r -h -s (this will change the attributes of the files. -r means read only -h means unhide)
now delete all files with and extension ".cmd" and ".inf"
delete also all ".com" files but donot include "NTDETECT.com"
delete also all ".bat" files. donot include "autoexec.bat"
and delete all ".exe" files if any hidden exe files where found
now from the root directory or "c:\" type "cd windows\system32"
type dir /ah to show all hidden files because tavo, kavo and ckvo are always hidden
now if you found any kavo, tavo or ckvo file delete it by typing
del kav* (delete all kav-whatever follows the kav word)
del tav*
del ckv*
now go to drive "d:" or whatever drive you have there.
then you follow the frist procedure like what we do in drive c:
its easy removing this virus than bar311 isnt it?
this virus can slow internet connection or even cannot access the internet and disable detection of flashdrives or any removable drive.
or copy this codes and name it as "delkavo.bat"
c:
cd\
attrib *.* -r -h -s
del *.cmd
del *.inf
(delete suspecious .com and .bat files)
cd\windows\system32
Attrib kav*.* -r -h -s
attrib tav*.* -r -h -s
attrib ckv*.* -r -h -s
del *.inf
del kav*
del tav*
del ckv*
d:
attrib *.* -r -h -s
del *.com
del *.cmd
del *.inf
del *.bat
pause
So in this way this can be removed manually.

Removing Bar311.exe virus

Bar311.exe virus or winzip123 includes the these files: bar311.exe, password_viewer.exe, photos.zip.exe and pc-off.bat. The pc-off.bat contains the syntax "C:/path/shutdown -s -f -t 2 -c" which automatically shutdown your computer when you run the cmd.exe or command.
Process to manual removal
1. run the task manager by clicking Ctrl+Alt+Del or rightclick on the taskbar and click task manager. In the Process tab click on the following and click end process buttong: password_viewer.exe or bar311.exe or photos.zip.exe

2. Edit the registry by cliking Start then Run then type regedit then press enter or ok. The registry editor should appear.
In the registry editor you can see the following:
HKEY_CLASEES_ROOTHKEY_CURRENT_USER
HKEY_LOCAL_MACHINE
HKEY_USERS HKEY_CURRENT_CONFIG
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon]

"Userinit"="userinit.exe,bar311.exe" -> remove ", bar311.exe" only.
[HKEY_CURRENT_USER\Software\Microsoft\Windows\ CurrentVersion\Explorer\Advanced]

Delete the following by pressing delete or rightcick then click delete...
"Hidden"=dword:00000001
"HideFileExt"=dword:00000000
"ShowSuperHidden"=dword:00000001
[HKEY_CURRENT_USER\Software\Microsoft\Command Processor] "autorun"="c:\Windows\pc-off.bat" -> remove
"c:\Windows\pc-off.bat" or delete the autorun key
3. On your flash disk or thumb drive rightclick the thumbdrive icon and click on open or on the navagation toolbar just type the thumbdrive ex. f: or e: to avoid triggering the autorun.inf then delete autorun.inf and password_viewer.exe or bar311.exe.
4. Open notepad and type this following;
@echo off
del /a /f
c:\Windows\bar311.exe
del /a /f
c:\Windows\password_viewer.exe
del /a /f
c:\Windows\photos.zip.exe
del /a /f
c:\Windows\pc-off.bat
pause
save this as a batch file, any name with a .bat extension ex. delete.bat
In saving the file, on the save as type instead of Text Documents (*.txt) change it to all files before saving the batch file.

Thursday, November 5, 2009

Remove Autorun&Autorun.inf virus Easily and Quickly

I am going to explain two method here.
Method-1
1.) Open Notepad
2.) Do not write anything in it.
3.) Save as (any where in PC i.e Desktop) with name “autorun.inf”
4.) Copy and paste in your “Pen Drives”
5.) Remove your drive then insert again, it will open normally

Method-2
Does your antivirus can't remove the autorun& autorun.inf virus in your system or USB storage device completely? Or even they can't detect the virus?
Autorun& autorun.inf virus is a new kind of virus/trojan, most of common antivirus products such as Kaspersky, Nod32, Avast, AVG can do little about this kind of virus/trojan.
Autorun Virus Remover uses proactive technology to permanently remove autorun& autorun.inf viruses, also it can block any autorun/autorun.inf viruses trying to infect the system via USB drives(pendrive, external hard disk, iPod, etc). What you need to do is just clicking the scan button of Autorun Virus Remover.
Support all kinds of external removable media
* Pen drives
* USB sticks
* USB Flash cards
* USB MP3 players
* USB Audio players
* External hard drives
* Pocket PCs
* Mobile phones
* iPods and iPhones
* Other USB mass storage enabled devices
You can get it from thier official website http://www.autorunremover.com/

Wednesday, November 4, 2009

Computer Virus & Solutions

Today we are familiar with the term cyber crimes. Sometime we may be a victim of the cyber crime. Most of the cyber crimes are done through the internet. The increasing number of cyber crime has made it difficult to use the internet even for browsing. Some countries have banned the sites related to pornography. Most of the servers creates the black list which contains the name of the websites that may harm the users if viewed. Now let us look into how to use internet safely.
Install a software firewall in your system. The firewall allows you to know about the applications that access the internet and allows you to block the applications from accessing the internet.
There may be virus or trojan installed in your computer that access the internet without your knowledge. The firewall shows all the applications connected to the internet and allows you to block or terminate the application.
As you know, the world's most safest browser is Mozilla Firefox 3.5. It is very fast also. Hence it is more recommended to use Firefox browser. The fire fox has a add-on named Website Of Trust (WOT) which shows how safe the website we visited is. So I recommend you to install this add-on
If you are visiting a site related to finance, it would be better if you use private browsing option in fire fox. To enable private browsing go to tools menu -> start private browsing. During private browsing, no data will be stored other than downloaded files and bookmarks.
Try to avoid storing user name and passwords in browser. Also change the password periodically. This will ensure more security to your account. Also don't forget to sign out or log out after viewing the website. Do not click on the links that you are unsure about the content.
Try to avoid visiting porn sites and sites that provides serials or cracks for the sharewares. Download files from the servers you trust. For searching software, it would be better if you search software in filehippo or CNET or other such trusted sites.