Photo http://miggiphotos.com/image.php
Photo http://funwiththisguy.com/image.php
Photo http://ariafotos.com/image.php
Photo http://zhelefun.com/image.php
Photo http://tviceimg.com/image.php
Photo http://tusfbfotos.com/image.php
Photo http://twittersphoto.com/image.php
Photo http://tuesimages.com/image.php
Photo http://red-myspace.com/image.php
If you got this message through your YM, please do not click them. I got this message today and feel so annoying lah!
so below are the step to remove this virus from your computer :
Manually delete these files:
C:\Windows \mds.sys
C:\Windows \mdt.sys
C:\Windows \winbrd.jpg
C:\Windows \net.exe
C:\Windows \infocard.exe
after that please delete this registry :
[HKEY_CURRENT_USER \ Software \ Microsoft \ Windows \ CurrentVersion \ Run]
“Firewall Administrating”=”C:\\WINDOWS\\infocard.exe” “Administrating Firewall” = “C: \ WINDOWS \ \ infocard.exe”
[HKEY_LOCAL_MACHINE \ SOFTWARE \ Microsoft \ Windows \ CurrentVersion \ Run]
“Firewall Administrating”=”C:\\WINDOWS\\infocard.exe” “Administrating Firewall” = “C: \ WINDOWS \ \ infocard.exe”
[HKEY_LOCAL_MACHINE \ SOFTWARE \ Microsoft \ Windows NT \ CurrentVersion \ Terminal Server \ Install \ Software \ Microsoft \ Windows \ CurrentVersion \ Run] “Administrating Firewall” = “C: \ WINDOWS \ \ infocard.exe”
[HKEY_LOCAL_MACHINE \ SYSTEM \ ControlSet001 \ Services \ SharedAccess \ Parameters \ FirewallPolicy \ StandardProfile \ AuthorizedApplications \ List]
“C:\\Documents and Settings\\[b][/b]\\Desktop\\IM56245.JPG-www.myspace.com.exe”=”C:\\WINDOWS\\infocard.exe:*:Enabled:Firewall Administrating” “C: \ Documents and Settings \ \ [b] [/ b] \ \ Desktop \ \ IM56245.JPG-www.myspace.com.exe” = “C: \ WINDOWS \ \ infocard.exe: *: Enabled: Firewall Administrating ”
[HKEY_LOCAL_MACHINE \ SYSTEM \ CurrentControlSet \ Services \ SharedAccess \ Parameters \ FirewallPolicy \ StandardProfile \ AuthorizedApplications \ List]
“C:\\Documents and Settings\\[b][/b]\\Desktop\\IM56245.JPG-www.myspace.com.exe”=”C:\\WINDOWS\\infocard.exe:*:Enabled:Firewall Administrating” “C: \ Documents and Settings \ \ [b] [/ b] \ \ Desktop \ \ IM56245.JPG-www.myspace.com.exe” = “C: \ WINDOWS \ \ infocard.exe: *: Enabled: Firewall Administrating ”
[HKEY_USERS \ S-1-5-21-117609710-764733703-1957994488-1003 \ Software \ Microsoft \ Windows \ CurrentVersion \ Run]
“Firewall Administrating”=”C:\\WINDOWS\\infocard.exe” “Administrating Firewall” = “C: \ WINDOWS \ \ infocard.exe”
Then download Malwarebytes Anti-Malware
Install and scan using malwarebytes anti-malware
Recent Comments