Four Steps to Eradicate The Kido

Malicious program named Kido or Conficker has spread over the internet. And the internet users were threatened by the new version.of it. So, how do we delete it? Here are tips from the Kaspersky Antivirus to eradicate the Kido.

There is a Special software called KKiller can be used to remove this worm. To prevent all infected server and computers by kido, you are advised to do the following steps :


• Install the patch from Microsoft is closing the gap MS08-067, MS08-068, MS09-001.

• Ensure that the local administrator account password is not easily predictable.

• The password must consist of at least 6 characters that is the combination of capital letters, non-capital, numbers, and special characters such as punctuation.

• Turn off of the USB Flash Disk or CD/DVD autorun features.

KKiller.exe software can be run locally on an infected computers or run remotely by Kaspersky Administration Kit.

How to Remove Kido or Conficker In Locally :

1. Download The KKiller and extract the package to a folder on an infected computer.

2. Run the file KKiller.exe. When the scan is complete, the command prompt window appears on the screen. To minimize the window, press any keys. In order to close the command prompt window automatically, you can run the KKiller.exe with the parameter of “-y”.

3. Wait until the scan is finished. When The Agnitum Outpost Firewall installed, please restart the computer.

4. After all, perform a full scan on the computer with Kaspersky Anti-Virus.


Good Luck.
read more ...

Avoiding The Active Virus in The Autorun.inf File with The Usb Firewall

USB FireWall will block all viruses and other programs that try to run away through Flashdisk, when we put a flashdisk into the computer, this application will run in the background and will soon give a warning or alert if any application running through autorun. And before the unwanted program active we can stop and delete the file.

Unlike an antivirus, USB Firewall does not need to be updated. Because it did not detect the virus, but it will block the trigger of virus spread. TheUSB Firewalls can also be used to clean the other disk partition such as drive D:, E: and others from any application that uses the autorun.


Once the program installed, then the application will run in the background. If there is a flashdisk or USB device installed and there is an autorun.inf file or an unwanted program run, it will be active and informed to us . Then we can select the options provided :

• The Show Autorun.inf button, to display the contents of the autorun.inf file. So, we will know what applications will be run on.

• The Delete button, to delete the file autorun.inf and other files associated with.

• The Cancel button, to ignore and let the process if there are files or applications will run through autorun.inf

• The Minimize button, to restore the program running in the backround (rear), it will be appear back after we click the Delete button or Cancel.

USB FireWall will block all viruses and other programs that try to run away through Flashdisk, when we put a flashdisk into the computer, this application will run in the background and will soon give a warning or alert if any application running through autorun. And before the unwanted program active we can stop and delete the file.

Unlike an antivirus, USB Firewall does not need to be updated. Because it did not detect the virus, but it will block the trigger of virus spread. TheUSB Firewalls can also be used to clean the other disk partition such as drive D:, E: and others from any application that uses the autorun.

Once the program installed, then the application will run in the background. If there is a flashdisk or USB device installed and there is an autorun.inf file or an unwanted program run, it will be active and informed to us . Then we can select the options provided :

• The Show Autorun.inf button, to display the contents of the autorun.inf file. So, we will know what applications will be run on.

• The Delete button, to delete the file autorun.inf and other files associated with.

• The Cancel button, to ignore and let the process if there are files or applications will run through autorun.inf

• The Minimize button, to restore the program running in the backround (rear), it will be appear back after we click the Delete button or Cancel.


USB Firewall also provides the clean all partition button, to scan and delete autorun file as in the hard disk drive (clean up other drives from the autorun file).

Download : USB Firewall
Website : www.net-studio.org

read more ...

How to Check If The Antivirus is Working or Not

If you doubt whether the antivirus on your computer worked or not, we can test by using the script provided by EICAR (European Institute for Computer Anti-Virus Research).

Here are steps to test The Antivirus :


1. Open your Notepad, then copy and paste the code below into your notepad.

X5O!P%@AP[4PZX54(P^)7CC)7}$EICAR-STANDARD-ANTIVIRUS-TEST-FILE!$H+H*

2. The pasted Text should be in a Horizontal position.

3. Then save as your notepad with the extension ‘Com’, the name is up to you.

Example: antiviruscheck.com

4. If after you do the Save As file then in directly your antivirus detects that the file is a virus, it is mean your antivirus is working properly.

Do not be afraid, the created file will not infect your computer even if detected by the anti-virus. The Text Code written above is the standard text used by the antivirus developers especially of The EICAR (European Institute for Computer Anti-Virus Research).

EICAR is an agency focuses on The Antivirus Standardization. These standards are used to see the reaction when the virus detected from the notepad text file created by the itself.

Good Luck.

read more ...

Avoiding Virus Infection From Usb Flash Disk

One of the media to transfer the virus to a computer or Laptop is the USB Flash Disk. Therefore, We should be careful if you want to transfer data from the Flash Disk.

At the moment we want to plugin a USB FlashDisk, just before entering the USB FlashDisk into the USB port, press the SHIFT key, and enter the USB FlashDisk while pressing the shift key for 8-10 seconds.
If the system installs the drivers for USB FlashDisk, press and hold on the SHIFT Key until the installation is completed (usually the baloon popup will be appeared). Pressing or holding on the SHIFT Key on a old computer will take a longer time. Usually in the Windows XP The Dialog Box will be appeared, which gives information about the features of a FilterKey. Do not worry this is an accessibility feature. We can disable this feature via Control Panel> Accessibility Options.


This technique actually is to disable the autorun.inf feature which usually found in the CD presentation, company profile or CD of driver installation software. And this feature is typically used by virus makers to transfer the virus into the computer system. Try and prove it, insert the CD presentation or CD driver installer by pressing simultaneously the SHIFT Key for a few seconds (usually untill the sound round of CD Drive stopped) and The presentation flash screen will be not appeared.

Good Luck.

read more ...

Cleaning Tips of Online Games Virus

For those of you who do not want important data lost or stolen, beware of Virus behind the online games.
Your PC/Laptop should not be infected with the virus OnlineGames. And also to remember, please be careful at the online forum on the Internet that provides suspicious links or you do not believe in its validity. Especially for companies with many computers in a network, Vaksincom recommend to filter suspicious IPs. However, if your PC/Laptop was already infected with the trojan, you inevitably have to fight to clean up a bit Online Games viruses, before your data stolen by this Trojan. Here are steps to clean it up :


First, turn off the System Restore (XP/ME), while it being used. Second, turn off virus activity. Use the Windows Task Manager to kill the virus process. Third, turn off virus file (liser.exe)(see image attached). Fourth, Remove string registry that was created by the virus. To make it easier use the registry script below.

[Version]

Signature=”$Chicago$”

Provider=Vaksincom Oeyy

[DefaultInstall]

AddReg=UnhookRegKey

DelReg=del

[UnhookRegKey]

HKLM, SoftwareCLASSESbatfileshellopencommand,,,”"”%1″” %*”

HKLM, SoftwareCLASSEScomfileshellopencommand,,,”"”%1″” %*”

HKLM, SoftwareCLASSESexefileshellopencommand,,,”"”%1″” %*”

HKLM, SoftwareCLASSESpiffileshellopencommand,,,”"”%1″” %*”

HKLM, SoftwareCLASSESregfileshellopencommand,,,”regedit.exe “”%1″”"

HKLM, SoftwareCLASSESscrfileshellopencommand,,,”"”%1″” %*”

HKLM, SOFTWAREMicrosoftWindows NTCurrentVersionWindows, AppInit_DLLs, 0

[del]

HKCU, SoftwareMicrosoftWindowsCurrentVersionRun, Kell

Use the notepad, then save with the name “repair.inf” (use the Save As Type option to All Files to avoid mistakes).

At Least, Delete virus files liser.exe & liser.dll manually, which is in the folder “C: Program Files Manson” or can use tools Norman Malware Cleaner. You can download it right here.


Good Luck.

read more ...