|
Mislim da si zarazen sa Trojan.Bookmarker.C(Trojan.Bookmarker.C is a variant of Trojan.Bookmarker that modifies the Internet Explorer home page and search page, and adds bookmarks to the Favorites folder)
Trojan.Bookmarker.C is distributed as an executable installer through Web browser exploits or downloaders.
When the installer program is executed, it does the following:
Creates the following files:
%System%\Mtwirl32.dll
%System%\Mtwcnl32.dll, which is actually a text file that controls the Trojan's behavior
....Treba ti anti-virus program da ga ochistis...tu ti ne mogu pomoci ali evo kako da ga sklonis iz registra...
Click Start, and then click Run. (The Run dialog box appears.)
Type regedit
Then click OK. (The Registry Editor opens.)
Navigate to the key:
HKEY_CLASSES_ROOT\CLSID
In the left pane, delete the subkey:
{3F143C3A-1457-6CCA-03A7-7AA23B61E40F}
Do one of the following:
If you are running Windows NT/2000/XP, navigate to the key:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\SharedTaskScheduler
If you are running Windows 95/98/Me, navigate to the key:
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad
In the right pane, delete the value:
"{3F143C3A-1457-6CCA-03A7-7AA23B61E40F}" = "DDE Control Module"
Po registru radi samo ako znas sta radis...Ako ne znas,nadji nekog ko zna..
|
