Stay up-to-date via RSS!

Photo http://miggiphotos.com/image.php

Photo http://funwiththisguy.com/image.php

Photo http://ariafotos.com/image.php

Photo http://zhelefun.com/image.php

Photo http://tviceimg.com/image.php

Photo http://tusfbfotos.com/image.php

Photo http://twittersphoto.com/image.php

Photo http://tuesimages.com/image.php

Photo http://red-myspace.com/image.php

If you got this message through your YM, please do not click them. I got this message today and feel so annoying lah!

so below are the step to remove this virus from your computer :

Manually delete these files:

C:\Windows \mds.sys

C:\Windows \mdt.sys

C:\Windows \winbrd.jpg

C:\Windows \net.exe

C:\Windows \infocard.exe

after that please delete this registry :

[HKEY_CURRENT_USER \ Software \ Microsoft \ Windows \ CurrentVersion \ Run]
“Firewall Administrating”=”C:\\WINDOWS\\infocard.exe” “Administrating Firewall” = “C: \ WINDOWS \ \ infocard.exe”

[HKEY_LOCAL_MACHINE \ SOFTWARE \ Microsoft \ Windows \ CurrentVersion \ Run]
“Firewall Administrating”=”C:\\WINDOWS\\infocard.exe” “Administrating Firewall” = “C: \ WINDOWS \ \ infocard.exe”

[HKEY_LOCAL_MACHINE \ SOFTWARE \ Microsoft \ Windows NT \ CurrentVersion \ Terminal Server \ Install \ Software \ Microsoft \ Windows \ CurrentVersion \ Run] “Administrating Firewall” = “C: \ WINDOWS \ \ infocard.exe”

[HKEY_LOCAL_MACHINE \ SYSTEM \ ControlSet001 \ Services \ SharedAccess \ Parameters \ FirewallPolicy \ StandardProfile \ AuthorizedApplications \ List]
“C:\\Documents and Settings\\[b][/b]\\Desktop\\IM56245.JPG-www.myspace.com.exe”=”C:\\WINDOWS\\infocard.exe:*:Enabled:Firewall Administrating” “C: \ Documents and Settings \ \ [b] [/ b] \ \ Desktop \ \ IM56245.JPG-www.myspace.com.exe” = “C: \ WINDOWS \ \ infocard.exe: *: Enabled: Firewall Administrating ”

[HKEY_LOCAL_MACHINE \ SYSTEM \ CurrentControlSet \ Services \ SharedAccess \ Parameters \ FirewallPolicy \ StandardProfile \ AuthorizedApplications \ List]
“C:\\Documents and Settings\\[b][/b]\\Desktop\\IM56245.JPG-www.myspace.com.exe”=”C:\\WINDOWS\\infocard.exe:*:Enabled:Firewall Administrating” “C: \ Documents and Settings \ \ [b] [/ b] \ \ Desktop \ \ IM56245.JPG-www.myspace.com.exe” = “C: \ WINDOWS \ \ infocard.exe: *: Enabled: Firewall Administrating ”

[HKEY_USERS \ S-1-5-21-117609710-764733703-1957994488-1003 \ Software \ Microsoft \ Windows \ CurrentVersion \ Run]
“Firewall Administrating”=”C:\\WINDOWS\\infocard.exe” “Administrating Firewall” = “C: \ WINDOWS \ \ infocard.exe”

Then download Malwarebytes Anti-Malware

Install and scan using malwarebytes anti-malware

This entry was posted on Saturday, May 1st, 2010 at 3:45 pm and is filed under Info Teknologi. You can follow any responses to this entry through the RSS 2.0 feed. You can leave a response, or trackback from your own site.