Monday, March 15, 2010

Virus Tutorial: Making viruses non-active with MsConfig (Part III)

When we found viruses in Windows Task Manager and we have used software which acting as task manager, it is better if we combine it with Msconfig. This is how we do:

1. Get into the safemode (can be read in the previous articles).

2. Click Start>>RUN, click msconfig>>startup>>untick mark at the virus items.

3. There are several viruses which making this msconfig disabled.

Try to use script from vaksin.com

...............................

[Version]

Signature="$Chicago$"

Provider=Vaksincom

[DefaultInstall]

AddReg=UnhookRegKey

DelReg=del

[UnhookRegKey]

HKLM, Software\CLASSES\batfile\shell\open\command,,,"""%1"" %*"

HKLM, Software\CLASSES\comfile\shell\open\command,,,"""%1"" %*"

HKLM, Software\CLASSES\exefile\shell\open\command,,,"""%1"" %*"

HKLM, Software\CLASSES\piffile\shell\open\command,,,"""%1"" %*"

HKLM, Software\CLASSES\regfile\shell\open\command,,,"regedit.exe "%1""

HKLM, Software\CLASSES\scrfile\shell\open\command,,,"""%1"" %*"

HKLM, SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon, Shell,0, "Explorer.exe"

[del]

HKCU, Software\Microsoft\Windows\CurrentVersion\Policies\System,DisableRegistryTools

HKCU, Software\Microsoft\Windows\CurrentVersion\Policies\System,DisableCMD

HKCU, Software\Microsoft\Windows\CurrentVersion\Policies\Explorer,NoFolderOptions

HKCU, Software\Microsoft\Windows\CurrentVersion\Run,Tok-Cirrhatus

HKLM, SOFTWARE\Microsoft\Windows\CurrentVersion\Run,Bron-Spizaetus

..........................


Copy to note pad with buka.inf

It is easy to use, right click this file then click “install”.

To get better result, you can combine it with regedit.

No comments: