Nak remove virus shortcut

Nilamsari

Salam all,

Thumb drive saya dan PC terkena serangan virus shortcut. Kat mana saya nak dapatkan antivirus untuk virus tersebut. Saya ada remove menggunakan command prompt tetapi macam kurang berkesan. Anti virus dulu saya pernah ada tetapi sekarang dah out of date. Tq for the info.

salmon-suki

Format..hihihi
Updet ler av tu..xpun dulu mcm ada y bt av utk shortcut ni..sy pn dah lpe nama software tu..cer gugel..sy dah slmt format pndrive..tp rasanya virus tu dlm lappy..tpkse format lappy gk kot..kekeke~

skali

saya yang buat panduan ni. bahasa inggeris dia saya guna yang senang aje. moga bermanafaat.


TROJAN: <name>#GB(Secured by Kaspersky Internet Security 2017).bat
=====

How to test if your PC is infected?
=====

a.Get an empty thumbdrive.
b.Format it.
c.There shouldn't be any files in the thumbdrive after you've formatted it.
d.If you find 2 files:
<name>#GB(Secured by Kaspersky Internet Security 2017).bat and Readme. You're infected.

How to clean? (You must be connected to the internet until step 4).
=====

1. Install CCleaner:
https://www.piriform.com/ccleaner/download
1.1 Run the Cleaner menu to clean your PC from internet cache, temp files etc.
1.2 Run the Registry menu to clean your registry. No need to backup registry.
1.3 Run the Tools>>Startup. If you see this: *\AppData\Roaming\Kaspersky Internet Security 2017. You're infected.


2. Install Norton Power Eraser:
https://security.symantec.com/nbrt/npe.aspx
2.1 Run it. It'll run rootkit scan and ask to restart.
NPE will find 3 entries of virus or more. Choose Create restore point if you can. (sometimes you can't). Delete the virus.
PC will restart.
2.2 After restarting, NPE will run again.
Most of the time NPE will detect another 1 or 2 *.exe infected files.
Send it to cloud (there's these cute cloud icons).
NPE will suggest you delete those files. Delete them.
If somehow NPE doesn't run after restarting the PC, run NPE and scan again.

3. Install adwcleaner.
https://www.malwarebytes.com/adwcleaner/
3.1 Click Run Scan for Adware/PUPs.
You'll see these: PUP.Optional.Legacy, [Key] -HKU or HKCU or HKLM.
Reboot to clean.
Do it.
You'll see Deleted: [Key] - HKU or HKCU or HKLM.

YOUR PC IS CLEAN!!!

Just to be sure.
Run CCleaner
Run the Tools>>Startup.
If you see one string of *\AppData\Roaming\Kaspersky Internet Security 2017 just delete it.
Mission accomplished.

STILL CANNOT FIND THE FILES IN YOUR THUMBDRIVE?
=====

1.Open My Computer.
Go here or type system volume information.
<Thumbdrive letter>:\System Volume Information

All your hidden files are here.

2. Copy files you wanted to save onto your desktop. Copy don't CUT.
3. Paste in new folder on desktop.
4. Format your thumbdrive.
5. Copy back to your thumbdrive.



One more thing.
=====

Install SMADAV.
http://www.smadav.net/?page=download
Smadav cleans and finds your hidden files.

Done.
=====

All files are free.

a1ast0r

Pakai SMADAV ataupun 360 internet Security. Tapi masalah dengan 360 ni kadang-kadang function berkenaan macam tak berfungsi. Macam ikut mode dia je.. Pening jugak kadang-kadang

idzwanr

guna UITM virus shortcut remover.

http://terengganu-darul-iman.blogspot.com/2016/08/anti-virus-uitm-v31-shortcut-virus.html