1. Make database.mdb file in My Documents.
2. Create autorun.inf file on each drive, flash disk, and folders.
3. Create files per folder Thumb.db
4. Create a file in every folder Microsoft.lnk
5. Create a new file in every folder Harry Potter
6. Duplicate each folder. Lnk extension
7. In Task Manager there wscript.exe services.
Step-by-step restore / remove / clean:
1. Turn off System Restore
2. Kill / turn wscript.exe services / processes
3. Remove / delete files in My Documents database.mdb
4. Delete duplicate files ->
Use the search in Windows, click "More Advanced Options",
Make sure the "Search system folders" and "Search hidden files and folders" choose (ticked)
Search autorun.inf file size of 8KB
Search Thumb.db file size 8KB
Search files *. lnk (all files with the extension. .lnk), size 1KB
After the search, remove / delete all established file.
5. Delete / remove the registry that contains database.mdb
0 comments:
Post a Comment