Wednesday, August 15, 2007
How to remove copy.exe, host.exe, autorun.inf, temp1.exe & temp2.exe : Perlovga virus
Download the PRT Perlovga Removal Tool v1.0.2 and restart your computer in Safe mode and run this tool. If you have infected floppy/flash disks you can insert them and click remove. You can repeat this process for every disk you have.
Thursday, August 9, 2007
How to remove FS6519.dll.vbs / power.dll.vbs & autorun.inf: Autoplay and TAGA LIPA ARE! Trojan Virus
Read and follow this instruction carefully.
1. Go to My Computer -> Tools Menu -> Folder Options -> View Tab
2. Check Show hidden files and folders
3. Uncheck Hide extensions for known file type and Hide protected operating system files
4. When Windows displays a popup warning you about protected operating system files, click on Yes and click on OK
5. Search for FS6519.dll.vbs/power.dll.vbs and autorun.inf on your hard disk drive and delete all instances of this file.
6. If you get a warning that something is using the program. Press Ctrl+Alt+Del (to bring up the Task Manager) and go to Processes, end all instances of wscript.exe. Close the Task Manager afterwards.
7. Run regedit.exe. Go to Edit -> Find and type FS6519.dll.vbs/power.dll.vbs
8. Edit any matching registry entry by selecting it, right-click to modify, remove the last two strings which is wscript.exe and FS6519.dll.vbs/power.dll.vbs, and click on OK.
9. To continue searching for other matching entries, press F3. Repeat step 8 if another match is found.
12. To remove the IE title TAGA LIPA ARE!, search that string again in the registry and delete the string for every matching entry.
check your local drives if you still have autoplay... kng meron pa... check mo nalang ng maayus... hehehe! pagnatanggal nyo yan ay OK na... just follow carefully at unawaing mabuti... goodluck!
for questions, comments and suggestions, just contact me...
1. Go to My Computer -> Tools Menu -> Folder Options -> View Tab
2. Check Show hidden files and folders
3. Uncheck Hide extensions for known file type and Hide protected operating system files
4. When Windows displays a popup warning you about protected operating system files, click on Yes and click on OK
5. Search for FS6519.dll.vbs/power.dll.vbs and autorun.inf on your hard disk drive and delete all instances of this file.
6. If you get a warning that something is using the program. Press Ctrl+Alt+Del (to bring up the Task Manager) and go to Processes, end all instances of wscript.exe. Close the Task Manager afterwards.
7. Run regedit.exe. Go to Edit -> Find and type FS6519.dll.vbs/power.dll.vbs
8. Edit any matching registry entry by selecting it, right-click to modify, remove the last two strings which is wscript.exe and FS6519.dll.vbs/power.dll.vbs, and click on OK.
9. To continue searching for other matching entries, press F3. Repeat step 8 if another match is found.
12. To remove the IE title TAGA LIPA ARE!, search that string again in the registry and delete the string for every matching entry.
check your local drives if you still have autoplay... kng meron pa... check mo nalang ng maayus... hehehe! pagnatanggal nyo yan ay OK na... just follow carefully at unawaing mabuti... goodluck!
for questions, comments and suggestions, just contact me...
Subscribe to:
Posts (Atom)