|
blackpearl81 -> RE: computer help: virus removal (12/11/2010 11:35:40 AM)
|
*FR*
The first thing I would do, is run "MSCONFIG" (start -> run -> "msconfig" (no quotes) -> hit enter)
If you're using Win Vista/7, just type in MSCONFIG into the search box, and it'll come up.
Once Msconfig is launched, click on the startup tab. From what I've seen online, ST 2011 runs a process called "oHaKo00902.exe" (however, this isn't set in stone - but the name of the file will be random numbers/letters)
If you see it in msconfig, uncheck it (similarly, you can do the same for other applications - Yahoo/MSN/AIM messenger, Adobe Reader/Updater, Microsoft Office) this will stop those apps from runnign when your PC starts up, but they'll still be installed (You'll probably notice faster boot times too)
Once that's done, click apply, then click ok. It'll ask you if you want to restart. I think the option is "Exit without restart"
From this point, you have to enable all files & folders view in Windows.
If it's WinXP, do the following:
Open up "My Computer"
Open up "Local Disk (c:)
Up top, click Tools -> folder options -> view
Untick the following boxes/radio buttons:
"Show Hidden files & folders"
Click apply.
Click ok.
Once all that is done, navigate to the following folder:
Win XP
%systemdrive%\Documents and Settings\All Users\Application Data
Win Vista/7
%systemdrive%\Users\All Users\Application Data\
(%systemdrive% usually refers to c:)
Look for a folder with random numbers & letters, and delete it.
After that, navigate to the following folder:
Windows XP: C:\Documents and Settings\{USER}\Local Settings\Temp
Vista/7: C:\Users\{USER}\AppData\Local\Temp
(Note: {USER} refers to your user name: If your user name for the computer is "Joe" then it'll be C:\Documents and Settings\Joe\Local Settings\Temp)
Delete everything in the temp folder.
Restart your machine, and you should be ok.
|
|
|
|
