sunnuntai 8. heinäkuuta 2012

Poliisivirus on levinnyt Satakuntaan maaliskuusta lähtien. Se lähtee parhaiten järjestelmän palautuksella ja päälle virustarkitus. Yleensä koneeseen on ensin tullut muutama troijalainen.

sunnuntai 8. huhtikuuta 2012

Poliisi-virus

Poliisi-virus lähtee parhaiten järjestelmän palautuksella.

keskiviikko 8. kesäkuuta 2011

Automated Removal Instructions for XP Anti-Virus 2011, Vista Total Security 2011, and Win 7 Home Security using Malwarebytes' Anti-Malware:

1. Print out these instructions as we will need to close every window that is open later in the fix.

2. It is possible that the infection you are trying to remove will not allow you to download files on the infected computer. If this is the case, then you will need to download the files requested in this guide on another computer and then transfer them to the infected computer. You can transfer the files via a CD/DVD, external drive, or USB flash drive.

3. This infection changes settings on your computer so that when you launch an executable, a file ending with .exe, it will instead launch the infection rather than the desired program. To fix this we must first download a Registry file that will fix these changes. From a clean computer, please download the following file and save it to a removable media such as a CD/DVD, external Drive, or USB flash drive.

FixNCR.reg (http://download.bleepingcomputer.com/reg/FixNCR.reg)

Once that file is downloaded and saved on a removable devices, insert the removable device into the infected computer and open the folder the drive letter associated with it. You should now see the FixNCR.reg file that you had downloaded onto it. Double-click on the FixNCR.reg file to fix the Registry on your infected computer. You should now be able to run your normal executable programs and can proceed to the next step.

If you do not have any removable media or another clean computer that you can download the FixNCR.reg file onto, you can try and download it to your infected computer using another method. On the infected computer, right click on the Internet Explorer's icon, or any other browser's icon, and select Run As or Run as Administrator. If you are using Windows XP, you will be prompted to select a user and enter its password. It is suggested that you attempt to login as the Administrator user. For Windows 7 or Windows Vista, you will be prompted to enter your Administrator account password.

Once you enter the password, your browser will start and you can download the above FixNCR.reg file. When saving it, make sure you save it to a folder that can be accessed by your normal account. Remember, that you will be launching the browser as another user, so if you save it to a My Documents folder, it will not be your normal My Documents folder that it is downloaded into. Instead it will be the My Documents folder that belongs to the user you ran the browser as. Once the download has finished, close your browser and find the FixNCR.reg file that you downloaded. Now double-click on it and allow the data to be merged. You should now be able to run your normal executable programs and can proceed to the next step.

4. Now we must first end the processes that belong to XP Anti-Virus 2011, Vista Total Security 2011, and Win 7 Home Security and clean up some Registry settings so they do not interfere with the cleaning procedure. To do this, please download RKill to your desktop from the following link.

RKill Download Link - (Download page will open in a new tab or browser window.)

When at the download page, scroll down and click on the click on the link labeled eXplorer.exe download link . When you are prompted where to save it, please save it on your desktop.

5. Once it is downloaded, double-click on the eXplorer.exe icon in order to automatically attempt to stop any processes associated with XP Anti-Virus 2011, Vista Total Security 2011, and Win 7 Home Security and other Rogue programs. Please be patient while the program looks for various malware programs and ends them. When it has finished, the black window will automatically close and you can continue with the next step. If you get a message that RKill is an infection, do not be concerned. This message is just a fake warning given by XP Anti-Virus 2011, Vista Total Security 2011, and Win 7 Home Security when it terminates programs that may potentially remove it. If you run into these infections warnings that close RKill, a trick is to leave the warning on the screen and then run RKill again. By not closing the warning, this typically will allow you to bypass the malware trying to protect itself so that rkill can terminate XP Anti-Virus 2011, Vista Total Security 2011, and Win 7 Home Security . So, please try running RKill until the malware is no longer running. You will then be able to proceed with the rest of the guide. If you continue having problems running RKill, you can download the other renamed versions of RKill from the rkill download page. All of the files are renamed copies of RKill, which you can try instead. Please note that the download page will open in a new browser window or tab.

Do not reboot your computer after running RKill as the malware programs will start again.

6. Download Malwarebytes' Anti-Malware, or MBAM, from the following location and save it to your desktop:

Malwarebytes' Anti-Malware Download Link (Download page will open in a new window)

7. Once downloaded, close all programs and Windows on your computer, including this one.

8. Double-click on the icon on your desktop named mbam-setup.exe. This will start the installation of MBAM onto your computer.

9. When the installation begins, keep following the prompts in order to continue with the installation process. Do not make any changes to default settings and when the program has finished installing, make sure you leave both the Update Malwarebytes' Anti-Malware and Launch Malwarebytes' Anti-Malware checked. Then click on the Finish button.

10. MBAM will now automatically start and you will see a message stating that you should update the program before performing a scan. As MBAM will automatically update itself after the install, you can press the OK button to close that box and you will now be at the main program as shown below.

Win 7 Home Security on virusohjelma

Kyseinen virusohjelma katkaisee selaimen yhteydet ja estää ohjelmien suorittamisen jopa vikasietotilassa.
Kaapeliyhteys voi toimia vikasietotilassa ja nettiin voi päästä avaamalla Oma tietokone-näkymän ja osoiteriville laittaa osoitteeksi www.google.fi ja hakukentään
hakusanoiksi win 7 Home Security bleeping, jolloin pääsee sivuille, joissa on ohjeet viruksen poistamiseksi.

sunnuntai 19. joulukuuta 2010

Microsoft Security Essentials Alert on virus

Kyseinen virus pistää koneen täysin jumiin. Usein ei auta kuin asentaa koko käyttis uudestaan.
Oheisena linkki ohjeisiin:
http://www.bleepingcomputer.com/virus-removal/remove-fake-microsoft-security-essentials-alert

ThinkPoint on virus

Kyseinen virus näkyy koneessa hotfix-prosessina ja se pitää ensin sammuttaa, että saa koneen toimimaan ja voi suorittaa viruspuhdistuksen. Ensin pitää myös suorittaa explorer prosessi, jotta saa työpöydän oikein näkyviin.

maanantai 6. joulukuuta 2010

Suomen Talvisota