1/31/2008

Trojan-PSW:W32/OnlineGames

to clean this virus, first of all, clean the register kill, use regedit.exe and find

HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run

clean the kavo.exe or taso.exe, and reset the windows hidden file value to 1

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ Explorer\Advanced\Folder\Hidden\SHOWALLCheckedValue

change the value from 0 to 1, start task manager, kill explorer.exe and run explorer.exe again. ( for showing hidden files.)

to root directory of all your disks, delete autorun.inf and ntdelect.com.
to system_device:/windows/system32/, delete kavo*.* and taso*.*.

then restart windows.

沒有留言: