This virus affects your system by-
- Disabling Task Manager
- Disabling Registry Editor
- Creates a startup entry to start upon system start and
- Creates its own exe files in Shared Documents folder which appear like ordinary folders.
- Disables Folder Options
- Uses your 50% or more processor
You can see that the folders in Shared Documents have an exe extension If you have unchecked Hide extensions for known file types in Folder Options
Virus Removal Tool Description
Sets these entries in Registry
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer]“NofolderOptions”=
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\System]“@”=
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]“Yahoo Messengger”=
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon]“Shell”=”Explorer.exe “
Deletes Virus Files-
svchossst.exe
All duplicated exe files in Shared Documents Folder
No comments:
Post a Comment