Reply to thread

Message: <blockquote data-quote="itsnotme" data-source="post: 9457673" data-attributes="member: 309765">Software n pic from this thread >>>  <a href="http://www.elakiri.com/forum/showthread.php?t=1066597" target="_blank">http://www.elakiri.com/forum/showthread.php?t=1066597</a>but his download contain trojan..! DONT RUN THAT EXE..!!!<a href="http://www.elakiri.com/forum/showthread.php?t=1066597" target="_blank"></a><a href="http://www.elakiri.com/forum/showthread.php?t=1066597" target="_blank"></a>(ekata thawa JB.exe kiyala stealer ekak attach karala thiyenne, eeke trojan atha  LOL)i hav cleaned that exe n original file just 95kb..  Original software: (no trojans)<a href="http://www.mediafire.com/?uruuuvun1u2fu45" target="_blank"></a><a href="http://www.mediafire.com/?uruuuvun1u2fu45" target="_blank">http://www.mediafire.com/?uruuuvun1u2fu45</a>rar pass :   itznotmedetections :::copy that text into the notepad n save it "detections.txt" ..  put it in same location. <img src="http://img690.imageshack.us/img690/6686/ratsearch.png" alt="" class="fr-fic fr-dii fr-draggable " style="" />If you have identified the particular program that is part of the malware,    and you want to remove it, please follow these steps. <ol> <li data-xf-list-type="ol">     Download and extract the <a href="http://download.sysinternals.com/Files/Autoruns.zip" target="_blank">Autoruns</a>        program by Sysinternals to  (<a href="http://download.sysinternals.com/Files/Autoruns.zip" target="_blank">http://download.sysinternals.com/Files/Autoruns.zip</a>)   C:\Autoruns           </li> <li data-xf-list-type="ol">Reboot into <a href="http://www.bleepingcomputer.com/tutorials/tutorial61.html" target="_blank">Safe         Mode</a>  so that the malware is not started when you are doing         these steps. Many malware monitor the keys that allow them to start and         if they notice they have been removed, will automatically replace that         startup key. For this reason booting into safe mode allows us to get         past that defense in most cases.</li> <li data-xf-list-type="ol">Navigate to the C:\Autoruns folder you created in Step     1 and double-click on autoruns.exe.</li> <li data-xf-list-type="ol">When the program starts, click on the Options  menu and     enable the following options by clicking on them. This will place a checkmark     next     to each of these options.<ol> <li data-xf-list-type="ol">Include empty locations</li> <li data-xf-list-type="ol">Verify Code Signatures</li> <li data-xf-list-type="ol">Hide Signed Microsoft Entries</li> </ol>   </li> <li data-xf-list-type="ol">Then press the F5 key on your keyboard to refresh the     startups list using these new settings.</li> <li data-xf-list-type="ol">The program shows information about your startup entries in 8 different     tabs. For the most part, the filename you are looking for will be found under     the Logon or the Services tabs, but you     should check all the other tabs to make sure they are not loading elsewhere     as well. Click on each tab and look through the list for the filename that     you want to remove. The filename will     be found     under     the Image     Path column.     There may be more than one entry associated with the same file as it is common     for malware     to create multiple startup entries. It is important     to note that many malware programs disguise themselves by using     the same     filenames as valid     Microsoft files. it is therefore important to know exactly which file, and     the folder they are in, that you want to remove. You can     check our <a href="http://www.bleepingcomputer.com/startups/" target="_blank">Startup     Database</a> for that information     or ask for help in our <a href="http://www.bleepingcomputer.com/forums/" target="_blank">computer help forums</a>.</li> <li data-xf-list-type="ol">Once you find the entry that is associated with the malware, you want to     delete that entry so it will not start again on the next reboot. To do that     right click on the entry and select delete. This startup     entry will now be removed from the Registry.</li> <li data-xf-list-type="ol">Now that we made it so it will not start on boot up, you should delete     the file using My Computer or Windows Explorer. If you can not see the file,     it may be hidden. To allow you to see hidden files you can follow the     steps for your operating system found in this tutorial:</li> <li data-xf-list-type="ol">When you are finished removing the malware entries from the Registry and     deleting the files, reboot into normal mode as you will now be clean from     the infection.</li> </ol>If this is useful..  ADD SOME REP+    LOL <img src="/styles/default/xenforo/smilies/default/yes.gif"  class="smilie" loading="lazy" alt=":yes:" title="Yes    :yes:" data-shortname=":yes:" /><img src="/styles/default/xenforo/smilies/default/yes.gif"  class="smilie" loading="lazy" alt=":yes:" title="Yes    :yes:" data-shortname=":yes:" /><img src="/styles/default/xenforo/smilies/default/yes.gif"  class="smilie" loading="lazy" alt=":yes:" title="Yes    :yes:" data-shortname=":yes:" /><img src="/styles/default/xenforo/smilies/default/yes.gif"  class="smilie" loading="lazy" alt=":yes:" title="Yes    :yes:" data-shortname=":yes:" /><img src="/styles/default/xenforo/smilies/default/cool.gif"  class="smilie" loading="lazy" alt=":cool:" title="Cool    :cool:" data-shortname=":cool:" /><img src="/styles/default/xenforo/smilies/default/cool.gif"  class="smilie" loading="lazy" alt=":cool:" title="Cool    :cool:" data-shortname=":cool:" /><img src="/styles/default/xenforo/smilies/default/cool.gif"  class="smilie" loading="lazy" alt=":cool:" title="Cool    :cool:" data-shortname=":cool:" /><img src="/styles/default/xenforo/smilies/default/shocked.gif"  class="smilie" loading="lazy" alt=":shocked:" title="Shocked    :shocked:" data-shortname=":shocked:" /></blockquote>

Verification: Awruddata maasa keeyada?

Top Bottom