Vitajte na [www.pocitac.win] Pripojiť k domovskej stránke Obľúbené stránky
Reštartujte počítač a stlačte kláves " F8 " načítať váš systém v núdzovom režime . Núdzový režim skončí v Conficker vírus procesy a zabrániť šíreniu infekcie .
2
Kliknite na tlačidlo " Štart " a zadajte " regedit " do poľa " Hľadaj " alebo " Run " . Stlačte tlačidlo " ENTER " .
3
Vyhľadajte nasledujúci položky registra : Spojené
HKEY_CURRENT_USER \\ Software \\ Microsoft \\ Windows \\ CurrentVersion \\ Run \\ " [ náhodné znaky ] " = " rundll32.exe " [ FILE NAME RANDOM DLL ] " , [ RANDOM Reťazec parametrov ] "
HKEY_LOCAL_MACHINE \\ SYSTEM \\ CurrentControlSet \\ Services \\ [ náhodné znaky ] \\ " ImagePath " = " % System % \\ svchost.exe - k netsvcs "
HKEY_LOCAL_MACHINE \\ SYSTEM \\ CurrentControlSet \\ Services \\ [ náhodné znaky ] \\ Parameters \\ " ServiceDLL " = " [ cesta k hrozbe ] "
HKEY_LOCAL_MACHINE \\ SOFTWARE \\ Microsoft \\ CurrentVersion \\ applety \\ " ds " = [ Šifrovaný DLL ]
HKEY_CURRENT_USER \\ Software \\ Microsoft \\ CurrentVersion \\ applety \\ " ds " = [ Šifrovaný DLL ]
HKEY_LOCAL_MACHINE \\ SYSTEM \\ CurrentControlSet \\ Services \\ netsvcs \\ parameters \\ " ServiceDLL " = " [ cesta k WORM ] "
HKEY_CURRENT_USER \\ Software \\ Microsoft \\ Windows \\ CurrentVersion \\ applety \\ " dl " = " 0 "
HKEY_LOCAL_MACHINE \\ SOFTWARE \\ Microsoft \\ windows \\ CurrentVersion \\ applety \\ " dl " = " 0 "
HKEY_CURRENT_USER \\ Software \\ Microsoft \\ Windows \\ CurrentVersion \\ applety \\ " ds " = " 0 "
HKEY_LOCAL_MACHINE \\ SOFTWARE \\ Microsoft \\ windows \\ CurrentVersion \\ applety \\ " DS " = " 0 "
HKEY_LOCAL_MACHINE \\ SYSTEM \\ CurrentControlSet \\ Services \\ [ WORM GENERATED SLUŽBA MENO ] \\ Parameters \\ " ServiceDLL " = " [ cesta k WORM ] "
HKEY_LOCAL_MACHINE \\ SYSTEM \\ CurrentControlSet \\ Services \\ [ WORM GENERATED Service Name ] \\ " ImagePath " = % SystemRoot % \\ system32 \\ svchost.exe - k netsvcs
HKEY_CURRENT_USER \\ Software \\ Microsoft \\ Windows \\ CurrentVersion \\ explorer \\ [ CLSID 1 ]
HKEY_LOCAL_MACHINE \\ SOFTWARE \\ Microsoft \\ Windows \\ CurrentVersion \\ Explorer \\ [ CLSID 1 ]
HKEY_CURRENT_USER \\ Software \\ Microsoft \\ Windows \\ CurrentVersion \\ Explorer \\ [ CLSID 2 ] \\ " [ WORD 1 ] [ WORD 2 ] " = " [ binárne dáta ] "
HKEY_CURRENT_USER \\ Software \\ Microsoft \\ Windows \\ CurrentVersion \\ Explorer \\ [ CLSID 2 ] \\ " [ WORD 1 ] [ WORD 2 ] " = " [ binárne dáta ] "
HKEY_CURRENT_USER \\ Software \\ Microsoft \\ Windows \\ CurrentVersion \\ Explorer \\ [ CLSID 2 ] \\ " [ WORD 1 ] [ WORD 2 ] " = " [ binárne dáta ] "
HKEY_LOCAL_MACHINE \\ SOFTWARE \\ Microsoft \\ Windows \\ CurrentVersion \\ Explorer \\ [ CLSID 2 ] \\ " [ WORD 1 ] [ WORD 2 ] " = " [ binárne dáta ] "
HKEY_LOCAL_MACHINE \\ SOFTWARE \\ Microsoft \\ windows \\ CurrentVersion \\ Explorer \\ [ CLSID 2 ] \\ " [ WORD 1 ] [ WORD 2 ] " = " [ binárne dáta ] "
HKEY_LOCAL_MACHINE \\ SOFTWARE \\ Microsoft \\ Windows \\ CurrentVersion \\ Explorer \\ [ CLSID 2 ] \\ " [ WORD 1 ] [ WORD 2 ] " = " [ binárne dáta ] "
HKEY_LOCAL_MACHINE \\ SYSTEM \\ CurrentControlSet \\ Services \\ [ WORM GENERATED SLUŽBA MENO ] \\ " Type " = " 4 "
HKEY_LOCAL_MACHINE \\ SYSTEM \\ CurrentControlSet \\ Services \\ [ WORM GENERATED Service Name ] \\ " start " = " 4 "
HKEY_LOCAL_MACHINE \\ SYSTEM \\ CurrentControlSet \\ Services \\ [ WORM GENERATED SLUŽBA MENO ] \\ " ErrorControl " = " 4 "
4
pravým tlačidlom myši na položku a kliknite na tlačidlo " Odstrániť " .
Copyright © počítačové znalosti Všetky práva vyhradené