Saturday, May 5, 2007

Virus arrrrr!!!!!!!!!!!!!!!!!!!

Get infected by virus again... and this time my AVG seem likes can't kill it!!!!
(Pls dun ask me where i get the virus -_-!! i din't surf the porno website... k? >_<) OMG!! I have scanned my laptop for thousand and million of time and i can't get all the virus kill. After each scan, the will be some new familiy member: Trojan Horse PSW.Generic3.xxx in my AVG's virus vault!

These are the symptoms
1. Everytime, when i wanna shut down my laptop, it will turn into blue screen.
2. When i restart my laptop there will always be a runtime error warning...
3. When i check in my Window Task Manager, there is a lots of "isignup.exe" processes which occupied up my CPU usage.

However, after some hardworks, i finally get it kill.
1. I scanned my laptop using AVG, Panda Online Active Scan, SUPERAntiSpyware, DrWeb-CureIt, and ComboFix I just have been told that one antivirus software can't kill all the virus... -_-!!


2. Then, kill the isignup thing by

a. Delete the ShellExecuteHooks event:
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks]"{B8A170A8-7AD3-4678-B2FE-F2D7381CC1B5}"

[HKEY_CLASSES_ROOT\CLSID\{B8A170A8-7AD3-4678-B2FE-F2D7381CC1B5}]

b. Restart my laptop

c. Delete the virus exe files:

ProgramFiles\InternetExplorer\ConnectionWizard\isignup.sys
ProgramFiles\InternetExplorer\ConnectionWizard\isignup.dll

d. Delete the Virus Registry:
[HKEY_CURRENT_USER\Software\Microsoft\qqjdd]

Finally, my laptop back to normal and i need not to format my laptop. Well, i am actually, i getting guidelines and helps from the Geekstogo forum. Quite a lot of expert there which is kind to offer their help. They also introduce quite a lot of useful and free antivirus/antispyware software.

No comments: