Kao prvo ugasi AutoPlay za sve uređaje da spriječiš širenje na stick -
TweakUI.
Radi se o ovome napasniku ->
WORM_VB.CQE
Bootaj u Safe Mode with Command Prompt te preko Task Managera pokreni neki file manager (
Total Commander) te odradi dolje navedeno, bez prve 4 stavke pošto je najbolje izbjegavati korištenje Explorera jer često štetočine se pokreću automatski s njim.
Citiraj:
1. Restart the computer in Safe mode (repeatedly hit F8 before Windows boots and choose Safe Mode).
2. Open Windows Explorer, go to Tools -> Folder Options.
3. Click on the View tab and select Show hidden files and folder.
4. Un-check Hide protected operating system files and click OK.
5. With Windows Explorer, locate and delete the following files:
C:\autorun.inf
C:\Recycled\destop.ini
C:\Recycled\info2
C:\Recycled\Recycled\ctfmon.exe
6. Click on Start -> Programs -> Startup, then right click on ctfmon.exe and select Delete.
(DO NOT LEFT-CLICK IT!)
7. After that, empty the Recycle Bin.
|
Poslije toga instalirati neki AV i odraditi "in-depth" scan.
ClamWin Portable ne zahtijeva instalaciju.