Diệt Virus foto... image.php bằng tay - Virus yahoo

[CaoHoang.DJ]

Dạo này thấy nick yahoo mình Spam toàn tin nhắn kiểu thế này

Photo http://miggiphotos.com/image.php
Photo http://funwiththisguy.com/image.php
Photo http://ariafotos.com/image.php
Photo http://zhelefun.com/image.php
Photo http://tviceimg.com/image.php
Photo http://tusfbfotos.com/image.php
Photo http://twittersphoto.com/image.php
Photo http://tuesimages.com/image.php
Photo http://red-myspace.com/image.php

trước hết bạn đừng click vào link trên, và hãy áp dụng thủ thuật dưới đây để diệt chúng bằng tay. nếu có phần mềm diệt virus thì vẫn tốt hơn

Đầu tiên bạn xóa các file sau:

C:\Windows\mds.sys

C:\Windows\mdt.sys

C:\Windows\winbrd.jpg

C:\Windows\net.exe

C:\Windows\infocard.exe

Sau đó bạn xóa các key sau:
Vào Run(Win + R) gõ regedit rồi Enter

[HKEY_CURRENT_USER\Software\Microsoft\Windows\Curre ntVersion\Run]
“Firewall Administrating”=”C:\\WINDOWS\\infocard.exe” “Administrating Firewall” = “C:\WINDOWS\\ infocard.exe”

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Curr entVersion\Run]
“Firewall Administrating”=”C:\\WINDOWS\\infocard.exe” “Administrating Firewall” = “C:\WINDOWS\\ infocard.exe”

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Terminal Server\Install\Software\Microsoft\Windows\CurrentV ersion\Run] “Administrating Firewall” = “C:\WINDOWS\\ infocard.exe”

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\S haredAccess\Parameters\FirewallPolicy\StandardProf ile\AuthorizedApplications\List]
“C:\\Documents and Settings\\\\Desktop\\IM56245.JPG-www.myspace.com.exe”=”C:\\WINDOWS\\infocard.ex e:Enabled:Firewall Administrating” “C:\Documents and Settings\\ [/ b]\\ Desktop\\ IM56245.JPG-www.myspace.com.exe” = “C:\WINDOWS\\ infocard.exe: *: Enabled: Firewall Administrating ”

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Servic es\SharedAccess\Parameters\FirewallPolicy\Standard Profile\AuthorizedApplications\List]
“C:\\Documents and Settings\\\\Desktop\\IM56245.JPG-www.myspace.com.exe”=”C:\\WINDOWS\\infocard.ex e:Enabled:Firewall Administrating” “C:\Documents and Settings\\ [/ b]\\ Desktop\\ IM56245.JPG-www.myspace.com.exe” = “C:\WINDOWS\\ infocard.exe: *: Enabled: Firewall Administrating ”

[HKEY_USERS\S-1-5-21-117609710-764733703-1957994488-1003\Software\Microsoft\Windows\CurrentVersion\Run]
“Firewall Administrating”=”C:\\WINDOWS\\infocard.exe” “Administrating Firewall” = “C:\WINDOWS\\ infocard.exe”