We use cookies to ensure that we give you the best experience on our website. By continuing to browse, we are assuming that you have no objection in accepting cookies. You can change your cookie settings at any time.

全年无休的支持服务

我们随时准备帮助您解决任何互联网安全问题。

无论您选择即时聊天还是电子邮件,都可以确信我们的专家团队将迅速解答您的问题。

 

 

How to remove VBS.Flesh.A



THREAT NAME
VBS.Flesh.A

CLEAN INSTRUCTIONS

In order to remove it, restart in Safe Mode and do the following:

1. Go to Start, Run, type regedit and press OK.

 

2. Navigate to HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run

There you should see someting like:    name REG_SZ    "C:\Windows\name.vbs"

Make a note with that name and do the following:
NB: Before you edit the registry, please export the keys that you plan to edit, or create a backup of the system.

3. Delete the registry key.

 

4. Go to HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main
and delete the Window Title key.

 

5. Delete the file:


C:\Windows\name.vbs

6. To clean the removable storage device (USB stick, PEN drive etc.) right-click on your USB stick/PEN drive icon and select Explore.
NB: Be careful NOT to double-click on the icon because the malware will be reactivated.

7.  Locate and delete the autorun.inf file.


SYMPTOMS

1. When you navigate on the web the Internet Explorer window title shows Hacked by name.



DESCRIPTION
1. This is a harmless malware, you do not need to be concerned, your computer has not been hacked.

2. This malware search for flash drives every 200 seconds and when one is found it tries to copy itself on it.

3. It set the autorun.inf file in order to be run when the drive is accessed.

 

4. It set the HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run in order to run at startup.

 

5. It changes the HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main, Window Title.

 


Author:
The BullGuard Team

全年无休的支持

 


我们拥有专业的支持团队,可为您提供全年无休的标准英语专家建议,同时按指定时间段提供其他语言的专家建议。


立即获得帮助


升级 / 续订

 


已经是 BullGuard 的用户?


我们希望您尽情享受我们的产品!


升级 续订