Windows Managing System
Last Updated on Thursday, 19 July 2012 19:42 Friday, 30 March 2012 21:47
Here is the analysis of a fake software program Windows Managing System
Files found - view
%CommonPrograms%\Windows Managing System.lnk
%AppData%\Protector-xlur.exe
%AppData%\result.db
(Full path for the short folder names)
This program creates a file Protector-####.exe,A # can be a random character or a number.
There may be more files created by this virus program. You can find them out. First locate and note down the "date of creation" of any of the files mentioned above and after that, search the hard disk for other files created on that date or onward. See image.
Necessary steps to remove this virus program
- To remove processes created by the virus program from the Task Manager.
- To search and delete files created by the virus program from the hard disk. Enable to view "hidden files and folders" before you search. Otherwise files created by the virus program inside the hidden folders will not be found.
- To remove obsolete registry keys using CCleaner.
Detailed instructions and free Tools.
Preventive steps to avoid virus programs.
Reprinted with permission from Threatexpert.com
Vocabulary of the technical terms used in this article.
| < Prev | Next > |
|---|
