De Conflicker virus --- of de W32.Downadup - - is een kwaadaardig virus dat verwijdert registry entries , blokkeert de toegang tot de beveiliging van websites en voorkomt veilige toegang modus . De Conflicker worm heeft de mogelijkheid om uw computer gegevens ernstig beschadigen , dus het is van cruciaal belang om stappen in de richting van het verwijderen van de infectie te nemen . Het reinigen van gereedschappen op uw systeem kunnen worden gebruikt om deze schadelijke virussen te verwijderen . Instructies
1 Herstart de computer en druk op ' F8 ' om uw systeem te laden in de veilige modus . Veilige modus zal de Conflicker virus processen te beëindigen en te voorkomen dat de infectie zich verspreidt . Kopen van 2 Klik op de knop "Start " en typ " regedit " in de " Search" of het veld " Run " . Druk op ' Enter '.
3 Zoek de volgende registervermeldingen :
HKEY_CURRENT_USER \\ Software \\ Microsoft \\ Windows \\ CurrentVersion \\ Run \\ " [ RANDOM LETTERS ] " = " rundll32.exe " [ RANDOM DLL FILE NAME ] " , [ RANDOM parameterstring ] "
HKEY_LOCAL_MACHINE \\ SYSTEM \\ CurrentControlSet \\ Services \\ [ RANDOM LETTERS ] \\ " ImagePath " = " % System % \\ svchost.exe - k netsvcs "
HKEY_LOCAL_MACHINE \\ SYSTEM \\ CurrentControlSet \\ Services \\ [ RANDOM LETTERS ] \\ parameters \\ " ServiceDll " = " [ PATH TO DE BEDREIGING ] "
HKEY_LOCAL_MACHINE \\ SOFTWARE \\ Microsoft \\ CurrentVersion \\ applets \\ " ds " = [ VERSLEUTELDE DLL ]
HKEY_CURRENT_USER \\ Software \\ Microsoft \\ CurrentVersion \\ applets \\ " ds " = [ VERSLEUTELDE DLL ]
HKEY_LOCAL_MACHINE \\ SYSTEM \\ CurrentControlSet \\ Services \\ netsvcs \\ parameters \\ " ServiceDll " = " [ PATH TO WORM ] "
HKEY_CURRENT_USER \\ Software \\ Microsoft \\ Windows \\ CurrentVersion \\ Applets \\ " dl " = " 0 "
HKEY_LOCAL_MACHINE \\ SOFTWARE \\ Microsoft \\ Windows \\ CurrentVersion \\ Applets \\ " dl " = " 0 "
HKEY_CURRENT_USER \\ Software \\ Microsoft \\ Windows \\ CurrentVersion \\ Applets \\ " ds " = " 0 "
HKEY_LOCAL_MACHINE \\ SOFTWARE \\ Microsoft \\ Windows \\ CurrentVersion \\ Applets \\ " ds " = " 0 "
HKEY_LOCAL_MACHINE \\ SYSTEM \\ CurrentControlSet \\ Services \\ [ WORM GEGENEREERDE SERVICE NAAM ] \\ parameters \\ " ServiceDll " = " [ PATH TO WORM ] "
HKEY_LOCAL_MACHINE \\ SYSTEM \\ CurrentControlSet \\ Services \\ [ WORM GEGENEREERDE SERVICE NAME ] \\ " ImagePath " = % SystemRoot % \\ system32 \\ svchost.exe - k netsvcs
HKEY_CURRENT_USER \\ Software \\ Microsoft \\ Windows \\ CurrentVersion \\ Explorer \\ [ CLSID 1 ] HKEY_LOCAL_MACHINE
\\ SOFTWARE \\ Microsoft \\ Windows \\ CurrentVersion \\ Explorer \\ [ CLSID 1 ] HKEY_CURRENT_USER
\\ Software \\ Microsoft \\ Windows \\ CurrentVersion \\ Explorer \\ [ CLSID 2 ] \\ " [ WORD 1 ] [ WOORD 2 ] " = " [ binaire gegevens ] "
HKEY_CURRENT_USER \\ Software \\ Microsoft \\ Windows \\ CurrentVersion \\ Explorer \\ [ CLSID 2 ] \\ " [ WORD 1 ] [ WORD 2 ] " = " [ binaire gegevens ] " HKEY_CURRENT_USER \\ Software \\ Microsoft \\ Windows \\ CurrentVersion \\ Explorer \\ [ CLSID 2 ] \\
" [ WORD 1 ] [ WOORD 2 ] " = " [ binaire gegevens ] " < br > HKEY_LOCAL_MACHINE \\ SOFTWARE \\ Microsoft \\ Windows \\ CurrentVersion \\ Explorer \\ [ CLSID 2 ] \\ " [ WORD 1 ] [ WOORD 2 ] " = " [ binaire gegevens ] " HKEY_LOCAL_MACHINE
\\ SOFTWARE \\ Microsoft \\ Windows \\ CurrentVersion \\ Explorer \\ [ CLSID 2 ] \\ " [ WORD 1 ] [ WOORD 2 ] " = " [ binaire gegevens ] " HKEY_LOCAL_MACHINE \\ SOFTWARE \\ Microsoft \\ Windows \\ CurrentVersion \\ Explorer \\ [ CLSID 2 ]
\\ " [ WORD 1 ] [ WOORD 2 ] " = " [ binaire gegevens ] "
HKEY_LOCAL_MACHINE \\ SYSTEM \\ CurrentControlSet \\ Services \\ [ WORM GEGENEREERDE SERVICE NAME ] \\ " Type" = " 4 "
HKEY_LOCAL_MACHINE \\ SYSTEM \\ CurrentControlSet \\ Services \\ [ WORM GEGENEREERDE SERVICE NAME ] \\ " Start" = " 4 "
HKEY_LOCAL_MACHINE \\ SYSTEM \\ CurrentControlSet \\ Services \\ [ WORM GEGENEREERDE SERVICE NAME ] \\ " ErrorControl " = " 4 "
4 rechtermuisknop op de vermelding en klik op 'Verwijderen'.
|
