How to identify and kill strange viruses when using YM
In the face of strange virus attacks, Yahoo Messenger (YM) community can identify and destroy viruses in two ways .
First, you can use anti-virus software like Kas, Microsoft Security Essentials and especially Malwarebytes' Anti-Malware 1.46 to be the most effective to kill Foto virus.
But before scanning your entire computer with the above antivirus programs, you should update the latest information about malware and make sure the software is copyrighted. After that, start scanning the entire system.
Second, you can use manual removal. Any kind of virus that enters the computer, no matter how mischievous it is, leaves a trace. Based on that, you can track it down by going to the system file to find it manually. This is a bit time-consuming but equally effective. You can combine in parallel with the antivirus software in use.
However, the YM user community needs to be very careful when deleting the following files correctly.
C: Windows mds.sys
C: Windows mdt.sys
C: Windows winbrd.jpg
C: Windows infocard.exe
C: Program Files infocard.exe
C: Program Files mds.sys
C: Program Files mdt.sys
C: Program tập tin winbrd.jpg
C: Users Public mds.sys
C: Users Public mdt.sys
C: Users Public infocard.exe
C: Users Public winbrd.jpg
C: Documents and Settings Administrator mds.sys
C: Documents and Settings Administrator mdt.sys
C: Documents and Settings Administrator infocard.exe
C: Documents and Settings Administrator winbrd.jpg
C: Documents and Settings mds.sys
C: Documents and Settings mdt.sys
C: Documents and Settings infocard.exe
C: Documents and Settings winbrd.jpg
User name.
Manually delete registry keys:
[HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionRun] 'Firewall Administrating' = 'C: WINDOWSinfocard.exe'.
[HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsNTCurrentVersionTerminal ServerInstallSoftwareMicrosoftWindowsCurrentV ersionRun] 'Firewall Administrating' = 'C: WINDOWSinfocard.exe'.
[HKEY_LOCAL_MACHINESYSTEMControlSet001ServicesS haredAccessParametersFirewallPolicyStandardProfileAuthorizedApplicationsList] 'C: Documents and Settings DesktopIM56245.JPG-www.myspace.com.exe' = 'C: WINDOWSinfocard.ex e: *: Enabled: Firewall Administrating'.
[HKEY_LOCAL_MACHINESYSTEMCurrentControlSetServic esSharedAccessParametersFirewallPolicyStandard ProfileAuthorizedApplicationsList] 'C: Documents and Settings DesktopIM56245.JPGwww.myspace. com.exe '=' C: WINDOWSinfocard.exe: *: Enabled: Firewall Administrating '.
[HKEY_USERSS-1-5-21-117609710-764733703-1957994488-1003SoftwareMicrosoftWindowsCurrentVersionRun] 'Firewall Administrating' = 'C: WINDOWSinfocard.exe'.
User name.
Finally, some security experts also recommend users to be more cautious when clicking on unknown links. Ideally, you should carefully review and continuously update the latest information for your antivirus software.
You should read it
- Goodbye Yahoo! Messenger, a time to remember!
- Warning of new viruses spread via Yahoo Messenger in Vietnam
- 'Treat' Yahoo Messenger virus
- How to use the new Yahoo Messenger version does not install the software
- Yahoo chat software will remove many features on December 14
- New worms appear to attack both Yahoo! Messenger, Skype
- Yahoo Messenger for iPad is available in iTunes Store of iTunes
- How to kill W32.Kavo virus
May be interested
- Worm can infect Windows system via PDF vulnerabilityaccording to the latest research of x force security group, security holes in pdf files will make it easier for hackers to put malware inside windows systems.
- Prevent virus wmpscfgs.exethere are a lot of problems when task manager always displays the wmpscfgs.exe application, but does not do anything to turn it off, and has a lot of troubles.
- New worms appear to attack both Yahoo! Messenger, Skypejust days after the worm spread through yahoo! messenger broke out, the internet emerged a more sophisticated new worm targeting both skype and yahoo! messenger
- Trojan hidden in Compatibility Checker Windows 7, Safari sticks to security errorsa type of trojan hidden in the system to check the compatibility of the system with windows 7 has just been discovered.
- Conficker worm still raging in TM Datacenter data centercalled conficker, the type of computer sieves spread across millions of computers around the world and left tremendous consequences.
- Symantec announced 100 dirty websites in 2009in the list of the 100 most dirty websites of 2009 that symantec listed, most of them are fake antivirus software websites.