ایک طریقہ یہ بھی ہے
Practical Steps to Remove Shortcut Virus:
1. Disable ‘System Restore’ for a while during the cleaning process.
2. Disconnect the computer network.
3. Turn off the virus active in memory by using the tools ‘Ice Sword‘. Once the tools are installed, select the file icon ‘Microsoft Visual Basic Project‘ and then click Terminate Process.
4. Remove the registry that was created by the virus:
Click the [Start]
Click [Run]
Type regedit.exe, and then click the [OK]
In the Registry Editor, browse the key [HKEY_CURRENT_USER\Software\Microsoft\Windows\Curre ntVersion\Run]
Then delete the key that has the data [C:\Documents and Settings\%username%].
5. Disable autoplay and autorun Windows. Copy the script below in notepad and save it as repair.inf, install the file: Right click repair.inf > install.
6. Delete files parent and duplicate files created by the virus included in the flash drive. To speed up the search process, you can use the ‘Search’. Be careful, do not mistakenly delete master files and duplicate files that have been created by the virus.
The characteristics of the main virus file:
- Icon ‘Microsoft Visual Basic Project’.
- File Size 128 KB (different size of each file).
- Ekstesi file. exe or. scr.
- File Type ‘Application’ or ‘Screen Saver’.
Then delete the duplicate shortcut files that have the characteristics of:
- Icon folder or icon
- Extension .lnk
- File Type ‘Shortcut’
- 1 KB file size
Delete the file .dll (eg ert.dll) and Autorun.inf file on a flash drive or hard disk drive. To avoid the virus is active again, first delete the master file that has the extension .exe or .scr then remove Shortcut file ( .lnk).
7. Unhide folder hidden by virus. To expedite the process, use the tools Unhide Files and Folders.
8. Install security patches ‘Microsoft Windows Shell shortcut handling remote code execution vulnerability-MS10-046‘. Download here.
For optimal cleaning and prevent re-infection, it is recommended to install antivirus is up-to-date and was able to detect more virus and do a full scan.
Bookmarks